Fallos del tipo CWE-943

150 resultados

Neutralização inadequada de caracteres especiais em lógica de consulta de dados

Ocorre quando a aplicação não sanitiza ou escapa corretamente caracteres especiais em parâmetros que compõem consultas (SQL, NoSQL, LDAP, XPath, etc.), permitindo que um atacante injete comandos maliciosos. O perigo está em contornar a lógica prevista da consulta para acessar, modificar ou deletar dados não autorizados.

Ejemplo

Um formulário de busca por nome recebe `'; DROP TABLE users; --` do usuário e o concatena diretamente na query SQL sem escapar. A aplicação executa dois comandos: a busca original e a deleção da tabela, comprometendo toda a base de dados.

Cómo mitigar

Use sempre consultas preparadas (prepared statements) ou ORM com parameterização, nunca concatene entrada do usuário em strings de consulta. Se for imprescindível montar dinâmicamente, implemente lista branca rigorosa de valores aceitos e escape específico para o contexto (SQL, NoSQL, LDAP, etc.).

CVE-2026-63637HIGHDgraph: DQL Injection via unvalidated regexp filter argument in GraphQL query rewriterEPSS 0.4%CVE-2026-76363MEDIUMStructured Query Language Injection through the REST API in Splunk SOAREPSS 0.4%CVE-2026-33980HIGHAzure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queriesEPSS 0.4%CVE-2026-76331HIGHSPL Injection through the REST API in Splunk EnterpriseEPSS 0.4%CVE-2026-79483MEDIUMFastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unaEPSS 0.4%CVE-2026-85167MEDIUMn8n before 2.36.2 Query Injection via Elasticsearch Firestore NodesEPSS 0.4%CVE-2025-36366MEDIUMIBM Db2 Denial of ServiceEPSS 0.4%CVE-2026-105675HIGHGhost: Invite Token Disclosure in Ghost Admin APIEPSS 0.4%CVE-2026-54019MEDIUMOpen WebUI: RAG ACL Bypass in Milvus Multitenancy ModeEPSS 0.4%CVE-2026-40352HIGHFastGPT: NoSQL Injection in updatePasswordByOld Leads to Account TakeoverEPSS 0.4%CVE-2026-104956MEDIUMPlane: Unauthenticated ORM field-name injection via `group_by`/`sub_group_by` on public deploy boards (DoS + blind oracle)EPSS 0.4%CVE-2026-73975HIGHdjehuty: Authenticated SPARQL injection in session editing allows writing arbitrary RDF triplesEPSS 0.4%CVE-2026-88026HIGHRegular expression injection via unescaped characters in LINQ query translation in MongoDB C# DriverEPSS 0.4%CVE-2026-53674HIGHBuddyPress 14.4.0 REGEXP Injection via @Mention Username ResolutionEPSS 0.4%CVE-2026-114510HIGHFlexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document contentEPSS 0.4%CVE-2026-73618HIGHBudibase Server before 3.40.0 NoSQL Injection via JSON ParameterEPSS 0.4%CVE-2025-33114MEDIUMIBM Db2 for Linux denial of serviceEPSS 0.4%CVE-2026-32247HIGHGraphiti vulnerable to Cypher Injection via unsanitized node_labels in search filtersEPSS 0.4%CVE-2026-100631HIGHParse Server 9.0.0 Unauthenticated Installation Deletion via Operator InjectionEPSS 0.4%CVE-2026-73976HIGHdjehuty: Unauthenticated SPARQL injection in the search API (`order`, `operator`, `key`)EPSS 0.4%