Skip to main content

Weak JSON typing

Description

Inputable JSON scalars are an arbitrary scalar type that allow users to return JSON objects from the schema. It is a weak typing bad practice and may represent an unhandled data leak risk for your application.

Remediation

When possible, use typed input objects instead.

Configuration

Identifier: schema/weak_json_typing

Examples

Ignore this check

{
"checks": {
"schema/weak_json_typing": {
"skip": true
}
}
}

Score

  • Escape Severity: INFO

CVSS

  • CVSS_VECTOR: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N/E:H/RL:O/RC:C
  • CVSS_SCORE: 0.0