VulnerabilityModified
CVE-2024-50312
A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query.
MEDIUM 5.3EPSS 0.56%
Does this matter?
Lower severity and a low EPSS score (0.56%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allows unauthorized users to retrieve a comprehensive list of available queries and mutations. Exposure to this flaw increases the attack surface, as it can facilitate the discovery of flaws or errors specific to the application's GraphQL implementation.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.56% probability · 45th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- redhat/openshift container platform
- Source
- secalert@redhat.com
References
- https://access.redhat.com/errata/RHSA-2024:6122
- https://access.redhat.com/errata/RHSA-2025:0115
- https://access.redhat.com/errata/RHSA-2025:0140
- https://access.redhat.com/security/cve/CVE-2024-50312Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2319378Issue Tracking
- https://github.com/openshift/console/pull/14409/filesPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.