CVE-2022-24827 SQL Injection in elide-datastore-aggregation

Elide is a Java library that lets you stand up a GraphQL/JSON-API web service with minimal effort. When leveraging the following together: Elide Aggregation Data Store for Analytic Queries, Parameterized Columns A column that requires a client provided parameter, and a parameterized column of typ...

SQL Injection in elide-datastore-aggregation

Impact When leveraging the following together: - Elide Aggregation Data Store for Analytic Queries - Parameterized Columns A column that requires a client provided parameter - A parameterized column of type TEXT There is the potential for a hacker to provide a carefully crafted query that would...

PT-2022-16906

Name of the Vulnerable Software and Affected Versions Elide versions prior to 6.1.4 Description The issue arises when using Elide Aggregation Data Store for Analytic Queries, Parameterized Columns, and a parameterized column of type TEXT. This combination allows a hacker to craft a query that...