Lucene search
+L

11 matches found

OSV
OSV
added 2026/08/30 11:55 a.m.10 views

EEF-CVE-2026-78691 Unescaped backslash allows LIKE wildcard injection in AshSql string search

Summary Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ashsql allows a user who supplies a search term to contains/2, stringstartswith/2, or stringendswith/2 to inject live SQL LIKE wildcards, turning a literal substring search into an...

2.1CVSS6AI score0.00138EPSS
SaveExploits0References4
Rows per page
Query Builder