Remote Code Execution (RCE)

2022-01-2604:44:15

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

remote code execution

shenyu

vulnerability

input sanitization

database query

EPSS

0.013

Percentile

86.1%

JSON

shenyu is vulnerable to remote code execution. The vulnerability exists due to lack of sanitization of database query language input to the system, allowing an attacker to inject maliciously crafted script via the query.

References

www.openwall.com/lists/oss-security/2022/01/25/8

www.openwall.com/lists/oss-security/2022/01/26/1

lists.apache.org/thread/3zzmwvg3012tg306x8o893fvdcssx639