CVE-2023-26144

Summary

CVE-2023-26144 is a Denial of Service (DoS) vulnerability affecting versions 16.3.0 and below 16.8.1 of the graphql package. The issue stems from insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file, resulting in poor system performance when parsing large queries. Although not yet proven, an attacker can potentially exploit this vulnerability to cause a DoS condition.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.