Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33919
HistoryJan 27, 2022 - 3:28 a.m.

SQL Injection

2022-01-2703:28:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.002 Low

EPSS

Percentile

54.2%

showdoc/showdoc is vulnerable to SQL Injection attacks. The library does not properly sanitize the uid parameter which is an user input, allowing a malicious user to inject and execute arbitrary SQL queries on the server.

0.002 Low

EPSS

Percentile

54.2%