CVE-2023-28877
The VTEX apps-graphql@2.x GraphQL API module does not properly restrict unauthorized access to private configuration data. (apps-graphql@3.x is unaffected by this issue.)
Published: 2023-03-31 · CVSS: 7.5 · CVSS 3.1
The VTEX apps-graphql@2.x GraphQL API module does not properly restrict unauthorized access to private configuration data. (apps-graphql@3.x is unaffected by this issue.)
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7