Improper Control of Dynamically-Managed Code Resources in WPGraphQL - #VU146819

Vulnerability details

The vulnerability allows a remote user to execute unintended PHP functions, disclose sensitive information, or cause a denial of service.

The vulnerability exists due to improper control of dynamically-managed code resources in WPGraphQL\\Model\\Model::__get() when resolving the same memoized model field value more than once during GraphQL query processing. A remote user can supply a string value matching a PHP function name and request the field twice through a GraphQL alias to execute unintended PHP functions, disclose sensitive information, or cause a denial of service.

Exploitation requires an attacker-influenced string value to be read twice on the same model instance during query resolution.

Affected software

Remediation

External References

• https://github.com/wp-graphql/wp-graphql/security/advisories/GHSA-7922-x8p4-55p9

Related Security Bulletins

• Improper Control of Dynamically-Managed Code Resources in WPGraphQL