Fallos del tipo CWE-943

65 resultados

Neutralização inadequada de caracteres especiais em lógica de consulta de dados

Ocorre quando a aplicação não sanitiza ou escapa corretamente caracteres especiais em parâmetros que compõem consultas (SQL, NoSQL, LDAP, XPath, etc.), permitindo que um atacante injete comandos maliciosos. O perigo está em contornar a lógica prevista da consulta para acessar, modificar ou deletar dados não autorizados.

Ejemplo

Um formulário de busca por nome recebe `'; DROP TABLE users; --` do usuário e o concatena diretamente na query SQL sem escapar. A aplicação executa dois comandos: a busca original e a deleção da tabela, comprometendo toda a base de dados.

Cómo mitigar

Use sempre consultas preparadas (prepared statements) ou ORM com parameterização, nunca concatene entrada do usuário em strings de consulta. Se for imprescindível montar dinâmicamente, implemente lista branca rigorosa de valores aceitos e escape específico para o contexto (SQL, NoSQL, LDAP, etc.).

CVE-2020-36195CRITICALSQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-OnEPSS 1.8%CVE-2021-1349MEDIUMCisco SD-WAN vManage Cypher Query Language Injection VulnerabilityEPSS 1.4%CVE-2018-19952—If exploited, this SQL injection vulnerability could allow remote attackers to obtain application information. This issue affects: QNAP SystEPSS 1.3%CVE-2022-36084CRITICALcruddl vulnerable to AQL injection through flexSearchEPSS 1.2%CVE-2020-5257HIGHSort order SQL injection in AdministrateEPSS 0.9%CVE-2021-1481MEDIUMCisco SD-WAN vManage Cypher Query Language Injection VulnerabilityEPSS 0.8%CVE-2021-34712MEDIUMCisco SD-WAN vManage Software Cypher Query Language Injection VulnerabilityEPSS 0.7%CVE-2026-40351CRITICALFastGPT: NoSQL Injection in loginByPassword leads to Authentication BypassEPSS 0.6%CVE-2026-32248CRITICALParse Server: Account takeover via operator injection in authentication data identifierEPSS 0.6%CVE-2026-27886CRITICALStrapi may leak sensitive data via relational filtering due to lack of query sanitizationEPSS 0.6%CVE-2024-28192MEDIUMNoSQL Injection Leading to Authentication Bypass in your_spotifyEPSS 0.6%CVE-2026-22558HIGHAn Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access toEPSS 0.6%CVE-2024-35136MEDIUMIBM Db2 denial of serviceEPSS 0.6%CVE-2024-31882MEDIUMIBM Db2 denial of serviceEPSS 0.6%CVE-2025-24787HIGHParameter injection in DB connection URIs leading to local file inclusion in WhoDBEPSS 0.5%CVE-2026-41274CRITICALFlowise: Cypher Injection in GraphCypherQAChainEPSS 0.5%CVE-2026-41327CRITICALDgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition FieldEPSS 0.5%CVE-2026-25591HIGHNew API has an SQL LIKE Wildcard Injection DoS via Token SearchEPSS 0.5%CVE-2026-10698HIGHTable scope bypass vulnerability in custom reportsEPSS 0.5%CVE-2024-4872CRITICALA vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attackEPSS 0.5%