CyberRota Analysis
AI-GeneratedA vulnerability in Keystone's findMany resolver allows unauthenticated remote GraphQL clients to exploit a flaw in the comparison of the signed take argument, enabling them to specify a negative take value that exceeds the configured limit. This can lead to excessive data retrieval, potentially exhausting service resources and impacting application performance. Organizations using Keystone versions prior to 6.5.3 should prioritize upgrading to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Keystone is a content management system for Node.js. Prior to 6.5.3, the findMany resolver in packages/core/src/lib/core/queries/resolvers.ts compares the signed take argument directly with graphql.maxTake, allowing a remote unauthenticated GraphQL client to provide a negative take value whose magnitude exceeds the configured bound. The bypass also applies to relationship queries and can return more records than the developer intended, potentially exhausting service resources. This issue is fixed in version 6.5.3.