How I Discovered a Live Dependency Confusion Vulnerability in a GraphQL-Based Web Application

July 5, 2025

Recon Phase: Introspection to the Rescue. The GraphQL endpoint allowed introspection queries, revealing internal schema objects including the …