Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
Miggo AIRoot Cause AnalysisThe vulnerability lies in the findMany function located in packages/core/src/lib/core/queries/resolvers.ts. The function is responsible for handling GraphQL queries that fetch multiple records. The patch for the vulnerability, found in commit 9fb88b246950ce4de754a43fe6416f20403577b1, clearly shows the fix. The original code checked if the take parameter was greater than the maxTake limit. However, it did not consider negative values for take. By providing a negative value, an attacker could bypass this check. The fix introduces Math.abs() to ensure the absolute value of take is compared against maxTake, thus mitigating the vulnerability. The vulnerable function is therefore findMany, as it is the function that processes the malicious input and contains the flawed logic.
findManypackages/core/src/lib/core/queries/resolvers.ts
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| @keystone-6/core | npm | <= 6.5.2 | 6.5.3 |