CVE-2024-47614
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Oct 3, 2024
Updated: Oct 4, 2024
CWE ID 770
Summary
CVE-2024-47614 is a vulnerability affecting the async-graphql GraphQL server library implemented in Rust. Prior to version 7.0.10, this library did not impose a limit on the number of directives that could be applied to a single field, leading to potential issues such as Service Disruption, Resource Exhaustion, and User Experience Degradation. This vulnerability has been addressed in version 7.0.10.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.