CVE-2021-28661

Publication date

2021-10-07 14:06:31

Family

mitre

State

PUBLISHED

Description

Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass.