Weaknesses of type CWE-943

108 results

Neutralização inadequada de caracteres especiais em lógica de consulta de dados

Ocorre quando a aplicação não sanitiza ou valida adequadamente entradas de usuário antes de usá-las em construção de queries (SQL, LDAP, NoSQL, etc.), permitindo que caracteres especiais sejam interpretados como comandos. Um atacante injeta caracteres como aspas, parênteses ou operadores lógicos para alterar a estrutura da consulta, contornando filtros ou acessando dados não autorizados.

Example

Um sistema busca usuários por nome usando `query = "SELECT * FROM users WHERE name = '" + userName + "'"`; se o usuário entra `admin' OR '1'='1`, a query vira `SELECT * FROM users WHERE name = 'admin' OR '1'='1'`, retornando todos os usuários. Isso é injection clássica.

How to mitigate

Use prepared statements/parameterized queries (o banco interpreta a entrada como dado, não código) ou implemente validação rigorosa e escape apropriado para cada contexto (SQL, LDAP, etc.). Nunca concatene strings diretamente em queries.

CVE-2026-85167MEDIUMn8n before 2.36.2 Query Injection via Elasticsearch Firestore NodesEPSS 0.2%CVE-2026-82060LOWInsufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image LookupsEPSS 0.2%CVE-2026-48121MEDIUM@langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state accessEPSS 0.2%CVE-2026-76331HIGHSPL Injection through the REST API in Splunk EnterpriseEPSS 0.2%CVE-2026-41697MEDIUMSpring Data Relational Parameter not Escaped for Query By Example LIKE PatternEPSS 0.2%CVE-2026-88027HIGHMass deletion and overwrite of embedded documents via query-operator injection in embedded record keys in MongoDB integration for LaravelEPSS 0.2%CVE-2026-88026HIGHRegular expression injection via unescaped characters in LINQ query translation in MongoDB C# DriverEPSS 0.2%CVE-2026-59319MEDIUMRediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data ExposureEPSS 0.2%CVE-2025-23292MEDIUMNVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection vulnerability where an User/Attacker may cause an auEPSS 0.2%CVE-2026-3021HIGHNon-relational SQL injection vulnerability (NoSQLi) in the Wakyma application webEPSS 0.2%CVE-2026-3022HIGHNon-relational SQL injection vulnerability (NoSQLi) in the Wakyma application webEPSS 0.2%CVE-2026-76349MEDIUMSPL Injection through Splunk Web Form Tokens in Splunk EnterpriseEPSS 0.2%CVE-2026-76327MEDIUMSPL Injection through Splunk Web in Splunk Secure GatewayEPSS 0.2%CVE-2026-76320MEDIUMSPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk EnterpriseEPSS 0.2%CVE-2026-73617HIGHBudibase before 3.40.0 NoSQL Injection via MongoDB datasourceEPSS 0.2%CVE-2026-28211HIGHArbitrary code execution in log reader via untrusted log fileEPSS 0.2%CVE-2026-31825MEDIUMSylius has a DQL Injection via API Order FiltersEPSS 0.2%CVE-2026-0504LOWInsufficient Input Handling in JNDI Operations of SAP Identity ManagementEPSS 0.2%CVE-2026-76329MEDIUMSPL Injection through Monitoring Console Dashboard Inputs in Splunk EnterpriseEPSS 0.2%CVE-2026-81527MEDIUMNoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translationEPSS 0.2%