Findings

Mutation over GET

Updated: June 19, 2025

findings action based findings api finding

Description

The GraphQL endpoint allows mutations via the GET method.

Remediation

Ensure that the GraphQL API does not allow GET method mutations.

Need help?

Contact FireTail support

Previous (Findings - Action based findings): Modal jailbreak vulnerability
Next (Findings - Action based findings): No output scanning