Weaknesses of type CWE-943

150 results

Neutralização inadequada de caracteres especiais em lógica de consulta de dados

Ocorre quando a aplicação não sanitiza ou valida adequadamente entradas de usuário antes de usá-las em construção de queries (SQL, LDAP, NoSQL, etc.), permitindo que caracteres especiais sejam interpretados como comandos. Um atacante injeta caracteres como aspas, parênteses ou operadores lógicos para alterar a estrutura da consulta, contornando filtros ou acessando dados não autorizados.

Example

Um sistema busca usuários por nome usando `query = "SELECT * FROM users WHERE name = '" + userName + "'"`; se o usuário entra `admin' OR '1'='1`, a query vira `SELECT * FROM users WHERE name = 'admin' OR '1'='1'`, retornando todos os usuários. Isso é injection clássica.

How to mitigate

Use prepared statements/parameterized queries (o banco interpreta a entrada como dado, não código) ou implemente validação rigorosa e escape apropriado para cada contexto (SQL, LDAP, etc.). Nunca concatene strings diretamente em queries.

CVE-2026-76327MEDIUMSPL Injection through Splunk Web in Splunk Secure GatewayEPSS 0.3%CVE-2026-76329MEDIUMSPL Injection through Monitoring Console Dashboard Inputs in Splunk EnterpriseEPSS 0.3%CVE-2026-76349MEDIUMSPL Injection through Splunk Web Form Tokens in Splunk EnterpriseEPSS 0.3%CVE-2026-44425MEDIUMShellHub: Crash-DoS via field injection in filter and sort-by parametersEPSS 0.3%CVE-2026-116801MEDIUMParse Server 9.0.0 before 9.10.5-alpha.6 ACL Bypass via $relatedTo QueryEPSS 0.3%CVE-2026-55444MEDIUMGoobi viewer: Solr query injection via the legacy RSS servlet q and filterQuery parametersEPSS 0.3%CVE-2026-97228LOWRapid7 Bulk Export MCP — GraphQL Query Injection in Export Status LookupEPSS 0.2%CVE-2026-6626MEDIUMCockpit-HQ Cockpit Asset Handler/Aggregate data query logic injectionEPSS 0.2%CVE-2026-103289HIGHGhost 5.9.0 before 6.44.1 Authorization Bypass via CommentsEPSS 0.2%CVE-2026-118645HIGHn8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where ParameterEPSS 0.2%CVE-2026-28211HIGHArbitrary code execution in log reader via untrusted log fileEPSS 0.2%CVE-2026-31825MEDIUMSylius has a DQL Injection via API Order FiltersEPSS 0.2%CVE-2026-3021HIGHNon-relational SQL injection vulnerability (NoSQLi) in the Wakyma application webEPSS 0.2%CVE-2026-3022HIGHNon-relational SQL injection vulnerability (NoSQLi) in the Wakyma application webEPSS 0.2%CVE-2026-41697MEDIUMSpring Data Relational Parameter not Escaped for Query By Example LIKE PatternEPSS 0.2%CVE-2025-23292MEDIUMNVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection vulnerability where an User/Attacker may cause an auEPSS 0.2%CVE-2026-49482MEDIUMClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subtitle OverwriteEPSS 0.2%CVE-2026-103250HIGHn8n before 1.123.80, 2.39.6, and 2.40.1 NoSQL Injection via MongoDB Chat MemoryEPSS 0.2%CVE-2026-0504LOWInsufficient Input Handling in JNDI Operations of SAP Identity ManagementEPSS 0.2%CVE-2026-77846LOWJSON path injection via unescaped get_path segments in AshSqliteEPSS 0.2%