Fallos del tipo CWE-943

150 resultados

Neutralização inadequada de caracteres especiais em lógica de consulta de dados

Ocorre quando a aplicação não sanitiza ou escapa corretamente caracteres especiais em parâmetros que compõem consultas (SQL, NoSQL, LDAP, XPath, etc.), permitindo que um atacante injete comandos maliciosos. O perigo está em contornar a lógica prevista da consulta para acessar, modificar ou deletar dados não autorizados.

Ejemplo

Um formulário de busca por nome recebe `'; DROP TABLE users; --` do usuário e o concatena diretamente na query SQL sem escapar. A aplicação executa dois comandos: a busca original e a deleção da tabela, comprometendo toda a base de dados.

Cómo mitigar

Use sempre consultas preparadas (prepared statements) ou ORM com parameterização, nunca concatene entrada do usuário em strings de consulta. Se for imprescindível montar dinâmicamente, implemente lista branca rigorosa de valores aceitos e escape específico para o contexto (SQL, NoSQL, LDAP, etc.).

CVE-2026-76327MEDIUMSPL Injection through Splunk Web in Splunk Secure GatewayEPSS 0.3%CVE-2026-76349MEDIUMSPL Injection through Splunk Web Form Tokens in Splunk EnterpriseEPSS 0.3%CVE-2026-63489HIGHYeti: Authenticated AQL injection via unvalidated search sorting and filter_aliases parametersEPSS 0.3%CVE-2026-116801MEDIUMParse Server 9.0.0 before 9.10.5-alpha.6 ACL Bypass via $relatedTo QueryEPSS 0.3%CVE-2026-44425MEDIUMShellHub: Crash-DoS via field injection in filter and sort-by parametersEPSS 0.3%CVE-2026-55444MEDIUMGoobi viewer: Solr query injection via the legacy RSS servlet q and filterQuery parametersEPSS 0.3%CVE-2026-97228LOWRapid7 Bulk Export MCP — GraphQL Query Injection in Export Status LookupEPSS 0.2%CVE-2026-6626MEDIUMCockpit-HQ Cockpit Asset Handler/Aggregate data query logic injectionEPSS 0.2%CVE-2026-103289HIGHGhost 5.9.0 before 6.44.1 Authorization Bypass via CommentsEPSS 0.2%CVE-2026-118645HIGHn8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where ParameterEPSS 0.2%CVE-2026-28211HIGHArbitrary code execution in log reader via untrusted log fileEPSS 0.2%CVE-2026-31825MEDIUMSylius has a DQL Injection via API Order FiltersEPSS 0.2%CVE-2026-3022HIGHNon-relational SQL injection vulnerability (NoSQLi) in the Wakyma application webEPSS 0.2%CVE-2026-3021HIGHNon-relational SQL injection vulnerability (NoSQLi) in the Wakyma application webEPSS 0.2%CVE-2026-41697MEDIUMSpring Data Relational Parameter not Escaped for Query By Example LIKE PatternEPSS 0.2%CVE-2025-23292MEDIUMNVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection vulnerability where an User/Attacker may cause an auEPSS 0.2%CVE-2026-49482MEDIUMClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subtitle OverwriteEPSS 0.2%CVE-2026-103250HIGHn8n before 1.123.80, 2.39.6, and 2.40.1 NoSQL Injection via MongoDB Chat MemoryEPSS 0.2%CVE-2026-0504LOWInsufficient Input Handling in JNDI Operations of SAP Identity ManagementEPSS 0.2%CVE-2026-78691LOWUnescaped backslash allows LIKE wildcard injection in AshSql string searchEPSS 0.2%