The VTEX apps-graphql@2.x GraphQL API module does not properly restrict unauthorized access to private configuration data. (apps-graphql@3.x is unaffected by this issue.)
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2023-03-31T00:00:00
Updated: 2023-03-31T00:00:00
Reserved: 2023-03-27T00:00:00
Link: CVE-2023-28877
JSON object: View
NVD Information
Status : Modified
Published: 2023-03-31T17:15:06.660
Modified: 2023-11-07T04:10:56.633
Link: CVE-2023-28877
JSON object: View
Redhat Information
No data.
CWE