Description

Acunetix determined that it was possible to access the Hasura GraphQL API without authentication. An unauthentication attacker may use this API to perform SSRF (Server-side request forgery) attacks.

Remediation

Restrict access to the Hasura GraphQL API by setting admin secret.

References

Server config examples

Related Vulnerabilities

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-11327)

WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-40690)

WordPress Plugin Video Conferencing with Zoom Information Disclosure (3.8.16)

Joomla! Core 3.9.x Information Disclosure (3.9.0 - 3.9.22)

Metabase Local File Inclusion (CVE-2021-41277)

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Acumonitor SSRF