Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38855
HistoryJan 12, 2023 - 9:53 a.m.

SQL Injection

2023-01-1209:53:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
salesforce
sql injection
queryspec.cs
vulnerability
software security

0.002 Low

EPSS

Percentile

53.4%

salesforce.sdk.core is vulnerable to SQL injection. The vulnerability exists in QuerySpec.cs because the user provided inputs for are not properly validated which allows an attacker to inject and execute malicious SQL queries in the system.

0.002 Low

EPSS

Percentile

53.4%

Related for VERACODE:38855