GHSA-rmxg-5p3r-j6hh
UnknownSummary
The vulnerability in GraphQL::Language::Cache#fetch reads parser cache files and passes their contents directly to Marshal.load without authenticating the payloads. If an attacker can place a crafted payload in the expected path and the application calls GraphQL::Language::Parser.parse_file, arbitrary code execution may occur.
Risk Assessment
The risk to the organization includes remote or local arbitrary code execution, which could lead to full application compromise, data theft, or further attacks on the infrastructure.
Recommendation
It is recommended to immediately update the GraphQL library to a patched version and ensure that cache paths are protected against unauthorized writes.
Other vulnerabilities in GraphQL Ruby
Original NVD description (English source)
GraphQL::Language::Cache#fetch reads parser cache files and passes their contents directly to Marshal.load without authenticating the payloads. If an attacker can place a crafted payload in the expected path and the application calls GraphQL::Language::Parser.parse_file, then attacker-controlled mar