Birkir Prime Information Disclosure Vulnerability in GraphQL API

A vulnerability allowing information disclosure has been identified in Birkir Prime versions through 0.4.0.beta.0. This issue arises from the GraphQL API's handling of introspection queries, which can be exploited remotely to reveal the API's capabilities. The vulnerability has been publicly disclosed and is actively exploitable.

Impact

Exploitation of this vulnerability allows unauthorized access to sensitive information about the GraphQL API, including its structure and available operations.

Reproduction

The vulnerability can be reproduced by sending an introspection query to the GraphQL endpoint. This can be done using a tool like curl, with a POST request that includes the introspection query in the request body.