Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47271

HistoryMay 30, 2024 - 7:35 a.m.

SQL Injection

2024-05-3007:35:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

3

sql injection

silverstripe/taxonomy

input validation

sanitization

taxonomydirectorycontroller

malicious queries

AI Score

8

Confidence

Low

silverstripe/taxonomy module is vulnerable to SQL injection. The vulnerability is due to insufficient input validation and sanitization within the TaxonomyDirectoryController, which allows ab attackers to inject malicious SQL queries.

AI Score

8

Confidence

Low