Findings
Introspection-based Circular Query
Updated: June 19, 2025
Description
The GraphQL endpoint allows circular queries using introspection.
Remediation
Ensure that the GraphQL API does not allow circular queries using introspection.
- Previous (Findings - Action based findings)
- Introspection is enabled
- Next (Findings - Action based findings)
- JSON deserialization error