Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/06 5:56 p.m.11 views

Authorizer: CQL/N1QL Injection in Cassandra and Couchbase Backends via fmt.Sprintf String Interpolation

Vulnerability Details CWE: CWE-943 - Improper Neutralization of Special Elements in Data Query Logic All 66+ CQL queries in internal/storage/db/cassandradb/ use fmt.Sprintf to interpolate user-controlled values directly into CQL query strings without parameterization. Unauthenticated endpoints...

6.1AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder