CVE-2024-50312
Graphql: information disclosure via graphql introspection in openshift
MEDIUM
5.3
CVSS Score
Published: October 22, 2024 at 01:24 PM UTC
Updated: August 11, 2026 at 04:17 PM UTC
1 product affected across 1 vendorOpenShift Container Platform
Using Red Hat OpenShift Container Platform 4.16 by Red Hat?
Get instant alerts when new vulnerabilities affect Red Hat OpenShift Container Platform 4.16 - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.3
Exploit prediction
EPSS 0.6%
SSVC
No known exploit
Description
A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allows unauthorized users to retrieve a comprehensive list of available queries and mutations. Exposure to this flaw increases the attack surface, as it can facilitate the discovery of flaws or errors specific to the application's GraphQL implementation.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
95%
Vendor states this is fixed in 418.94.202502100215-0 (unaffected)
Vendor states this is fixed in v4.16.0-202501080105.p0.g6fe3e8b.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.17.0-202501080135.p0.gedbd12e.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202412170221.p0.ga26fffe.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202412170221.p0.gcfbae04.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202412200107.p0.g2957f13.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501201133.p0.g4674e81.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g00882ba.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g01d5fbb.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g020f8b8.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g07daee4.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g0e11616.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g0fdb727.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g0feae25.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g14fa4d9.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g17ae6fb.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g18590a1.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g1b2791b.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g1db726a.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g1ede6c3.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g1f7d647.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g208d50c.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g314589c.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g32e7759.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g3385690.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g33a1141.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g344c5dc.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g3646a10.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g376f0ea.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g391c1b0.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g39b37c0.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g3a97784.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g3f4542e.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g3f6d1d8.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g474ad65.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g4b34592.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g4e26a69.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g50d1714.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g526498a.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g53274f1.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g53c01a7.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g59a8340.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g59ba356.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g5bfc808.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g5c43fe8.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g5c8b715.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g5fd8525.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g6bd77fc.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g6da706d.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g6ea2356.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g700802f.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g716eb0e.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g7cb8b38.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g7cf7fe2.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g7ec03e9.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g82c7731.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g85cb407.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g8be1749.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g8de8eb1.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g914783c.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g9506a1f.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g9852f98.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g987615c.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g9c2ff5e.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.g9e2015c.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.ga33026b.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.ga336f0b.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.ga371641.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gaf54f52.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gb0f0dc4.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gb51cd6b.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gb7efb8c.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gc21f5d0.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gc395190.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gc414d1f.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gcb1abfa.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gcb5a929.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gcca3837.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gcde5e47.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gd05a6de.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gd17bf3a.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gd352778.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gd36aea3.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gd44fca5.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gd664fe2.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gd914e77.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gd9fe2d8.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gd9fe8f3.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gdfc6c06.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.ge253fa3.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.ge4c214c.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.ge513c91.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.ge8c7c47.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.ge905646.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gef05fb5.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gf0a670c.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gf1711cf.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gf5b1470.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501230001.p0.gfeae260.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501231202.p0.gde85e47.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501241902.p0.g6cced66.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501272332.p0.g74f285c.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501281202.p0.g336d783.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501290901.p0.g5a1e906.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202501291931.p0.g01fc505.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502010001.p0.g061909a.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502040032.p0.g5348c85.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502040032.p0.gc864494.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502041201.p0.g3d9304e.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502041302.p0.g0a6f6eb.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502041632.p0.g0fac9aa.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502041632.p0.g6182930.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502041632.p0.gd1e0195.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502041632.p0.ge36d365.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502042101.p0.g26f6cb2.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502050001.p0.g3175f30.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502051601.p0.g6fe7000.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502051601.p0.gd5869b2.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502051931.p0.g74a2477.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502052031.p0.gf95a88f.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502060334.p0.g2575ff4.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502061801.p0.gb48488a.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502071432.p0.g62f62f7.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502071731.p0.g603ad0c.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502100301.p0.g04c22ee.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502101302.p0.g763313c.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502110432.p0.g0c7bed9.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502110432.p0.ga50d4c0.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502110432.p0.ga5a8299.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502110432.p0.gb707be6.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502110432.p0.gbd32ac5.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502110632.p0.g24ccf7a.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502110632.p0.gbe2ef91.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502141933.p0.g6d082d8.assembly.stream.el9 (unaffected)
Vendor states this is fixed in v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (6)
Vendor Advisoryx_refsource_REDHAT
Source: [email protected]
https://access.redhat.com/errata/RHSA-2025:0115Vendor Advisoryx_refsource_REDHAT
Source: [email protected]
https://access.redhat.com/errata/RHSA-2025:0140VDB Entryx_refsource_REDHATVendor Advisory
Source: [email protected]
https://access.redhat.com/security/cve/CVE-2024-50312Issue Trackingx_refsource_REDHAT
Source: [email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=2319378SSVC — Action Prioritization
SSVCNo known exploitAutomatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
5.3MEDIUMredhat
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- NONE
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- LOW
- Integrity
- NONE
- Availability
- NONE
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-200NVD-CWE-noinfo
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card