Fallos del tipo CWE-943

150 resultados

Neutralização inadequada de caracteres especiais em lógica de consulta de dados

Ocorre quando a aplicação não sanitiza ou escapa corretamente caracteres especiais em parâmetros que compõem consultas (SQL, NoSQL, LDAP, XPath, etc.), permitindo que um atacante injete comandos maliciosos. O perigo está em contornar a lógica prevista da consulta para acessar, modificar ou deletar dados não autorizados.

Ejemplo

Um formulário de busca por nome recebe `'; DROP TABLE users; --` do usuário e o concatena diretamente na query SQL sem escapar. A aplicação executa dois comandos: a busca original e a deleção da tabela, comprometendo toda a base de dados.

Cómo mitigar

Use sempre consultas preparadas (prepared statements) ou ORM com parameterização, nunca concatene entrada do usuário em strings de consulta. Se for imprescindível montar dinâmicamente, implemente lista branca rigorosa de valores aceitos e escape específico para o contexto (SQL, NoSQL, LDAP, etc.).

CVE-2026-120201CRITICALJpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN HeaderEPSS 2.2%CVE-2026-57193MEDIUMAsterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)EPSS 2.0%CVE-2026-27886CRITICALStrapi may leak sensitive data via relational filtering due to lack of query sanitizationEPSS 1.9%CVE-2020-36195CRITICALSQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-OnEPSS 1.8%CVE-2022-36084CRITICALcruddl vulnerable to AQL injection through flexSearchEPSS 1.5%CVE-2021-1349MEDIUMCisco SD-WAN vManage Cypher Query Language Injection VulnerabilityEPSS 1.4%CVE-2018-19952—If exploited, this SQL injection vulnerability could allow remote attackers to obtain application information. This issue affects: QNAP SystEPSS 1.3%CVE-2026-62906HIGHMicrosoft Discovery Studio Information Disclosure VulnerabilityEPSS 0.9%CVE-2020-5257HIGHSort order SQL injection in AdministrateEPSS 0.9%CVE-2021-1481MEDIUMCisco SD-WAN vManage Cypher Query Language Injection VulnerabilityEPSS 0.8%CVE-2021-34712MEDIUMCisco SD-WAN vManage Software Cypher Query Language Injection VulnerabilityEPSS 0.7%CVE-2026-32248CRITICALParse Server: Account takeover via operator injection in authentication data identifierEPSS 0.6%CVE-2026-10698HIGHTable scope bypass vulnerability in custom reportsEPSS 0.6%CVE-2026-40351CRITICALFastGPT: NoSQL Injection in loginByPassword leads to Authentication BypassEPSS 0.6%CVE-2024-28192MEDIUMNoSQL Injection Leading to Authentication Bypass in your_spotifyEPSS 0.6%CVE-2026-22558HIGHAn Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access toEPSS 0.6%CVE-2026-25591HIGHNew API has an SQL LIKE Wildcard Injection DoS via Token SearchEPSS 0.6%CVE-2025-24787HIGHParameter injection in DB connection URIs leading to local file inclusion in WhoDBEPSS 0.6%CVE-2024-31882MEDIUMIBM Db2 denial of serviceEPSS 0.6%CVE-2024-35136MEDIUMIBM Db2 denial of serviceEPSS 0.6%