CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.1. See the original NVD description below for full technical details.
CVE
CVE-2023-34047
Severity
LOW
CVSS
3.1
EPSS
0.36%
Original NVD Description
A batch loader function in Spring for GraphQL versions 1.1.0 - 1.1.5 and 1.2.0 - 1.2.2 may be exposed to GraphQL context with values, including security context values, from a different session. An application is vulnerable if it provides a DataLoaderOptions instance when registering batch loader functions through DefaultBatchLoaderRegistry.
Related CVEs
Other vulnerabilities affecting the same vendor(s)