Saleor GraphQL权限绕过漏洞通报

漏洞概述 在Saleor的GraphQL权限工具中存在一个损坏的授权检查。权限检查可能会错误地授权未认证请求在 突变中，以及在几个只读查询（页面、翻译、属性）中显示隐藏对象。 影响范围 受影响的版本： - - - 修复版本： - - - 修复方案 强烈建议升级到最新版本。如果无法立即升级，建议阻止对 突变的公共访问。 已知受影响组件 - 允许未认证的操作者更改订单设置。 - 允许未认证的操作者查看隐藏属性（即，带有 标志的属性）。 - 允许未认证的操作者查看隐藏属性（ ）。 参考链接 GitHub Issue GitHub Pull Request GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit GitHub Commit [GitHub Commit](https://github.com/saleor/saleor/commit/13796

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

Saleor GraphQL权限绕过漏洞通报

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

Saleor GraphQL权限绕过漏洞通报

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！