Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22377
HistoryJan 28, 2020 - 4:50 a.m.

SQL Injection

2020-01-2804:50:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

EPSS

0.002

Percentile

54.7%

geocoder is vulnerable to SQL injection. The vulnerability exists in sql.rb as the unvalidated values of sw_lat, sw_lng, ne_lat, ne_lng could be used in conjunction with within_bounding_box to inject and execute arbitrary SQL statements.

EPSS

0.002

Percentile

54.7%