Falhas do tipo CWE-943

150 resultados

Neutralização inadequada de caracteres especiais em lógica de consulta de dados

Ocorre quando a aplicação não sanitiza adequadamente dados do usuário antes de usá-los em consultas (SQL, LDAP, XPath, etc.), permitindo que caracteres ou sequências especiais sejam interpretados como parte da sintaxe da consulta. Um atacante injeta comandos ou operadores que modificam a lógica esperada, contornando filtros de autenticação ou acessando dados não autorizados.

Exemplo

Um login que concatena diretamente a entrada do usuário em uma query LDAP: filter = '(uid=' + username + ')'. Se o atacante digitar 'admin*', a busca retorna qualquer usuário com uid começando em 'admin', contornando validação de senha. Ou em SQL, inserir aspas e operadores booleanos para alterar o WHERE da consulta.

Como mitigar

Use prepared statements ou consultas parametrizadas (placeholders) em vez de concatenação de strings. Para LDAP e XPath, aplique escape de caracteres especiais conforme o padrão da tecnologia. Valide e restrinja entrada do usuário a um whitelist de valores esperados sempre que possível.

CVE-2026-48121MEDIUM@langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state accessEPSS 0.4%CVE-2026-34973MEDIUMphpMyFAQ has a LIKE Wildcard Injection in Search.php — Unescaped % and _ Metacharacters Enable Broad Content DisclosureEPSS 0.3%CVE-2026-3023MEDIUMNon-relational SQL injection vulnerability (NoSQLi) in the Wakyma application webEPSS 0.3%CVE-2026-42156HIGHFlowsint: Cypher query injection in node type on node creationEPSS 0.3%CVE-2026-42316MEDIUMKQL injection via kusto.tables.topics.mapping in kafka-sink-azure-kustoEPSS 0.3%CVE-2026-73617HIGHBudibase before 3.40.0 NoSQL Injection via MongoDB datasourceEPSS 0.3%CVE-2026-82060LOWInsufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image LookupsEPSS 0.3%CVE-2026-59962MEDIUMTandoor Recipes: ORM ORDER BY Injection via FK Traversal in Tandoor RecipesEPSS 0.3%CVE-2026-56094MEDIUMInformation Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)EPSS 0.3%CVE-2026-88023MEDIUMGridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB PHP LibraryEPSS 0.3%CVE-2026-114648HIGHNoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keysEPSS 0.3%CVE-2026-96744HIGHUnauthorized cache lock takeover via expression injection in lock owner values in MongoDB integration for LaravelEPSS 0.3%CVE-2026-102988MEDIUMPlane: ORM Field Injection via Unvalidated `order_by` Parameter (Including Unauthenticated Path)EPSS 0.3%CVE-2026-47181HIGHPenguinMod-BackendApi: NoSQL Injection in Password Reset Endpoint Allows Account TakeoverEPSS 0.3%CVE-2026-81527MEDIUMNoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translationEPSS 0.3%CVE-2026-114647MEDIUMNoSQL operator injection via unvalidated replacement document in findOneAndReplaceEPSS 0.3%CVE-2026-47835HIGHSpring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector StoresEPSS 0.3%CVE-2026-30833MEDIUMRocket.Chat: NoSQL injection in the EE ddp-streamer-serviceEPSS 0.3%CVE-2026-103258MEDIUMn8n before 2.39.6 and 2.40.x before 2.40.1 Filter Bypass via Parameter InterpolationEPSS 0.3%CVE-2026-59319MEDIUMRediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data ExposureEPSS 0.3%