Ohler Agoo
2 CVEs affecting Ohler Agoo. Latest disclosed: 2022-05-04. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-30288 | High | 7.5 | 2022-05-04 | Agoo before 2.14.3 does not reject GraphQL fragment spreads that form cycles, leading to an application crash. NOTE: the vendor has disputed this on the ground… |
CVE-2020-7670 | High | 7.5 | 2020-06-10 | agoo prior to 2.14.0 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable. HTTP pipelining issues and re… |