Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33963
HistoryJan 31, 2022 - 4:14 a.m.

SQL Injection

2022-01-3104:14:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.122 Low

EPSS

Percentile

95.4%

github.com/casdoor/casdoor is vulnerable to sql injection. An attacker can inject and execute malicious input through the GetSession function of adapter.go as it does not properly filter the user input field and value parameters.