Lucene search
+L

1 matches found

RustSec
RustSec
added 2025/07/11 12:0 p.m.10 views

matrix-sdk-sqlite: SQL injection vulnerability in `SqliteEventCacheStore::find_event_with_relations`

The SqliteEventCacheStore::findeventwithrelations function constructs SQL queries using format! with unescaped input, allowing an attacker to inject arbitrary SQL. This results in a SQL injection vulnerability...

7.7CVSS8AI score0.0026EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder