Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36357
HistoryJul 14, 2022 - 11:46 a.m.

SQL Injection

2022-07-1411:46:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
26
sql injection
oliverklee/seminars
eventbagbuilder
input sanitisation
malicious query

EPSS

0.002

Percentile

55.3%

oliverklee/seminars is vulnerable to SQL injection. Lack of sufficient sanitisation of input query to EventBagBuilder::limitToOrganizers and EventBagBuilder::limitToCategories allows an attacker to inject malicious SQL query.

EPSS

0.002

Percentile

55.3%

Related for VERACODE:36357