SQL Injection

manager-service is vulnerable to SQL Injection. The vulnerability exists because the toAuditCkSql function of AuditServiceImpl.java directly concatenates the groupId, streamId, auditId, and dt into the SQL query statement without doing any validation, which allows an attacker to inject and execute malicious SQL queries into the system.