GraphQL Vulnerabilities | Application Security Cheat Sheet

GraphQL is a query language designed to build client applications by providing an intuitive and flexible syntax and system for describing their data requirements and interactions. GraphQL uses a declarative approach to fetching data, clients can specify exactly what data they need from the API. As a result, GraphQL provides a single endpoint, which allows clients to get the necessary data, instead

[efcl]

GraphQLの関係の脆弱性についてのまとめ。 Introspection Queryでのスキーマ取得、API GatewayとしてGraphQLを使ってるときのSSRFの問題、アクセス制御の不備などについて