Findings
GraphQL client error
Updated: June 19, 2025
Description
GraphQL query has not been executed.
A GraphQL client error occurs when a query sent to the GraphQL API cannot be executed successfully, typically due to issues such as incorrect query syntax, invalid field requests, or violation of schema constraints. These errors usually indicate a problem with how the client constructs or sends the query, rather than an issue with the server itself. Unaddressed client errors can lead to poor user experience and hinder API adoption.
Example Attack
A front-end application attempts to query the API but requests a field (priceDetails) that doesn't exist in the schema. The API responds with a client error indicating that the field is invalid. If the front-end team doesn't handle this gracefully or lacks insight into the schema, the error might go unresolved, resulting in a non-functional feature for the end user.
Remediation
Investigate server logs to determine the root cause for this.