https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T02:19:40.696468+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-47715 CVE-2021-47715 — Hasura GraphQL 1.3.3 Server-Side Request Forgery via Remote Schema Injection 2026-10-18T02:19:40.697643+00:00

Affected: Hasura GraphQL

Hasura GraphQL 1.3.3 contains a server-side request forgery vulnerability that allows attackers to inject arbitrary remote schema URLs through the add_remote_schema endpoint. Attackers can exploit the vulnerability by sending crafted POST requests to the /v1/query endpoint with malicious URL definitions to potentially access internal network resources.