CVE-2025-23204

CVSS 3.1 Score 4.4 of 10 (medium)

Details

Published Mar 24, 2025
Updated: Mar 27, 2025
CWE ID 20

Summary

CVE-2025-23204 affects API Platform Core, a system used for creating REST and GraphQL APIs. In versions 3.3.8 and above, a security check following GraphQL resolvers is inadvertently replaced, leading to potential vulnerabilities. This issue only poses a risk when no security checks are present within the resolvers themselves. API Platform Core version 3.3.15 includes a patch to resolve this issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share