Skip to main content

Undefined objects

Description​

Undefined objects are objects that use the built-in GraphQL object type instead of referencing a custom one. They can be at the root of security issues due to their unstructured nature.

Remediation​

Enforce strong typing in your schema objects.

Configuration​

Identifier: schema/undefined_object

Examples​

Ignore this check​

{
    "checks": {
        "schema/undefined_object": {
            "skip": true
        }
    }
}

Score​

  • Escape Severity: INFO

CVSS​

  • CVSS_VECTOR: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
  • CVSS_SCORE: 0.0