Pimcore Demo Allows GraphQL Introspection
Discription

Introspection is enabled on `demo.pimcore.fun`. The demo site has graphql as a feature for users, but allows users to run instropection queries, which presents a potential schema information disclosure vulnerability.Read More

Back to Main

Subscribe for the latest news: