| عنوان | erupts erupt erupt <= 1.13.3 Improper Input Validation |
|---|
| الوصف | Erupt contains a HQL (Hibernate Query Language) injection vulnerability in the table query functionality. The sort.field parameter from user requests is directly concatenated into the ORDER BY clause without validation or parameterization, allowing authenticated attackers to inject arbitrary HQL expressions. This enables cross-table data exfiltration through boolean-based blind injection techniques. |
|---|
| المصدر | ⚠️ https://fx4tqqfvdw4.feishu.cn/docx/ETWUdbPk1oCC56xoEWHc3Q28nEc?from=from_copylink |
|---|
| المستخدم | xcxr (UID 86629) |
|---|
| ارسال | 09/03/2026 07:50 AM (7 أشهر منذ) |
|---|
| الاعتدال | 22/03/2026 12:59 PM (13 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 352431 [erupts erupt حتى 1.13.3 EruptJpaUtils.java geneEruptHqlOrderBy sort.field حقن SQL] |
|---|
| النقاط | 20 |
|---|