Threats tagged 'ghsa-mrxx-39g5-ph77'

A critical injection vulnerability in Dgraph allows unauthenticated attackers to exfiltrate the entire database when ACL is disabled (default configuration). The flaw arises from improper sanitization of the 'cond' field in upsert mutations, enabling injection of additional DQL query blocks that execute server-side and return data in HTTP responses. This bypasses authentication and authorization checks, leading to full read access and potential manipulation of mutation logic. The vulnerability affects versions prior to 25.3.3, 24.1.8, and 1.2.8.