Medium severity5.0NVD Advisory· Published Oct 4, 2023· Updated Jun 17, 2026

CVE-2023-43799

Description

Altair is a GraphQL Client. Prior to version 5.2.5, the Altair GraphQL Client Desktop Application does not sanitize external URLs before passing them to the underlying system. Moreover, Altair GraphQL Client also does not isolate the context of the renderer process. This affects versions of the software running on MacOS, Windows, and Linux. Version 5.2.5 fixes this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Altairgraphql/Altair
cpe:2.3:a:altairgraphql:altair:*:*:*:*:*:*:*:*
Range: <5.2.5
Altair/Altair GraphQL Client Desktop Applicationllm-create
Range: <5.2.5
Altair/Altairllm-create
Range: <5.2.5
Apollographql/Altairv5
Range: < 5.2.5

Patches

Vulnerability mechanics

References

github.com/altair-graphql/altair/security/advisories/GHSA-9m5v-vrf6-fmvmnvdVendor Advisory
github.com/altair-graphql/altair/releases/tag/v5.2.5nvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.325
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000