Lucene search

Veracode Vulnerability DatabaseVERACODE:45695

HistoryFeb 29, 2024 - 7:05 a.m.

SQL Injection

2024-02-2907:05:03

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

sql injection

unsantized data

arbitrary commands

vulnerability

software

AI Score

7.8

Confidence

High

EPSS

Percentile

9.0%

JSON

intelliants/subrion is vulnerable to SQL Injection. The vulnerability is due to unsanitized user-controlled data used while constructing a query. This allows attackers to manipulate sql queries and execute arbitrary sql commands.

References

cwe.mitre.org/data/definitions/89.html

github.com/advisories/GHSA-xxf8-fpmr-fw7v

github.com/intelliants/subrion/issues/910

subrion.org/