Salt Security Finds Serious GraphQL API Security Hole

3 years ago thenewstack.io

Summary: This is a summary of an article originally published by The New Stack. Read the full original article here →

https://graphql.org/, the open source query language for application programming interfaces (APIs), is very powerful. And, that’s exactly what happened, according to https://salt.security/, a leading API security company, when their researchers found a https://salt.security/blog/api-threat-research-graphql-authorization-flaws-in-financial-technology-platform in a B2B financial technology (FinTech) platform.

“Without dedicated API security tooling in place, organizations with API-based applications and platforms are opening the door to serious risks.

The Salt Labs research demonstrates that missteps in GraphQL APIs are leading to vulnerabilities and new attack vectors that leave organizations at risk.”

This is a purpose-built API security tool to protect GraphQL APIs across their entire life cycle.

DevOps Articles