Add CVE-2023-28104 for silverstripe/graphql

FriendsOfPHP · Mar 15, 2023 · 2641332 · 2641332
1 parent ed33e2b
commit 2641332
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/silverstripe/graphql/CVE-2023-28104.yaml b/silverstripe/graphql/CVE-2023-28104.yaml
@@ -0,0 +1,11 @@
+title:     "CVE-2023-28104 DDOS attack on graphql endpoints"
+link:      https://www.silverstripe.org/download/security-releases/CVE-2023-28104
+cve:       CVE-2023-28104
+branches:
+    4.1.x:
+        time:     2023-03-15 22:19:49
+        versions: ['>=4.1.1', '<4.1.2']
+    4.2.x:
+        time:     2023-03-15 22:21:49
+        versions: ['>=4.2.2', '<4.2.3']
+reference: composer://silverstripe/graphql