SQL Injection

2024-03-2905:54:09

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

reportico vulnerability input validation sql injection sensitive information system

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Reportico is vulnerable to SQL Injection. The vulnerability is due to improper input validation in the project parameter, allowing attackers to inject SQL queries and obtain sensitive information or other system information.

CPENameOperatorVersion
reportico-web/reporticole8.1.0
reportico-web/reporticole8.1.0

CPE	Name	Operator	Version
	reportico-web/reportico	le	8.1.0
	reportico-web/reportico	le	8.1.0

References

github.com/reportico-web/reportico/issues/52