forked from kmcdon83/Riches
-
Notifications
You must be signed in to change notification settings - Fork 3
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
CX SQL_Injection @ riches/WEB-INF/src/java/com/checkmarx/samples/riches/Messages.java [master] #236
Comments
Issue still exists. |
6 similar comments
Issue still exists. |
Issue still exists. |
Issue still exists. |
Issue still exists. |
Issue still exists. |
Issue still exists. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
SQL_Injection issue exists @ riches/WEB-INF/src/java/com/checkmarx/samples/riches/Messages.java in branch master
The application's getMessage method executes an SQL query with createQuery, at line 132 of riches\WEB-INF\src\java\com\checkmarx\samples\riches\model\MessageService.java. The application constructs this SQL query by embedding an untrusted string into the query without proper sanitization. The concatenated string is submitted to the database, where it is parsed and executed accordingly.
The attacker would be able to inject arbitrary data into the SQL query, by simply altering the user input getRemoteUser, which is read by the execute method at line 18 of riches\WEB-INF\src\java\com\checkmarx\samples\riches\Messages.java. This input then flows through the code to the database server, without sanitization.
This may enable an SQL Injection attack.
Severity: High
CWE:89
Vulnerability details and guidance
Internal Guidance
Checkmarx
Lines: 20
Code (Line #20):
The text was updated successfully, but these errors were encountered: