Security Test: Field Duplication¶

Description¶

Default Severity: info

When a GraphQL query lets you repeat the same field many times, it might seem harmless, but it can be exploited. Attackers can flood the system with repeated fields, overwhelming CPU and memory resources, potentially making the server unresponsive. Developers sometimes miss this risk because the duplicated fields don't appear to add value in normal use, but if unchecked, this vulnerability can lead to denial of service and severe performance problems.

Configuration¶

Identifier: resource_limitation/graphql_field_duplication

Examples¶

All configuration available:

checks:
  resource_limitation/graphql_field_duplication:
    skip: false # default

Compliance and Standards¶