Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36853
HistoryAug 30, 2022 - 2:22 p.m.

Insecure Token

2022-08-3014:22:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16

An issue was found in fts5UnicodeTokenize() in ext/fts5/fts5_tokenize.c in Sqlite. A unicode61 tokenizer configured to treat unicode “control-characters” (class Cc), was treating embedded nul characters as tokens. The issue was fixed in sqlite-3.34.0 and later.