kabiri-labs/CVE-2024-40094

PoC

This script exploits the CVE-2024-40094 vulnerability in graphql-java

view exploit source poc_in_githubauthor kabiri-labspublished 2025-01-17catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-40094US	—	0.94% (61st)	Exploit	2024-07-30
GraphQL Java (aka graphql-java) before 21.5 does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service via introspection queries. 20.9 and…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.