11 matches found
EEF-CVE-2026-78691 Unescaped backslash allows LIKE wildcard injection in AshSql string search
Summary Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ashsql allows a user who supplies a search term to contains/2, stringstartswith/2, or stringendswith/2 to inject live SQL LIKE wildcards, turning a literal substring search into an...
2.1CVSS6AI score0.00138EPSS
SaveExploits0References4
20