CVE-2021-47715 | Hasura GraphQL 1.3.3 POST /v1/query add_remote_schema server-side request forgery (Exploit 49791 / EUVD-2021-34744)

December 23, 2025 Yanac

A vulnerability was found in Hasura GraphQL 1.3.3. It has been classified as critical. Affected by this issue is the function add_remote_schema of the file /v1/query of the component POST Handler. The manipulation leads to server-side request forgery.

This vulnerability is documented as CVE-2021-47715. The attack can be initiated remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More