CVE-2022-37734

graphql-java before19.0 is vulnerable to Denial of Service

published September 12, 2022

CVSS
—
EPSS
3%
Percentile
85.3
In the wild
Unconfirmed
What it is

graphql-java before19.0 is vulnerable to Denial of Service. An attacker can send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0 and later, 18.3, and 17.4, and 0.0.0-2022-07-26T05-45-04-226aabd9.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02620 · 85.3th percentile
Published
2022-09-12T13:14Z
EPSS history
Timeline
  • 12 SEP 13:14Z
    graphql-java before19.0 is vulnerable to Denial of Service
    cvelistv5