CVE-2021-47714 — Hasura GraphQL 1.3.3 Local File Read via SQL Injection
Hasura GraphQL 1.3.3 contains a local file read vulnerability that allows attackers to access system files through SQL injection in the query endpoint. Attackers can exploit the…
Published: 2025-12-22 · CVSS: 6.9 · CVSS 4.0
Hasura GraphQL 1.3.3 contains a local file read vulnerability that allows attackers to access system files through SQL injection in the query endpoint. Attackers can exploit the pg_read_file() PostgreSQL function by crafting malicious SQL queries to read arbitrary files on the server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7