| 제목 | drogonframework drogon 1.9.13 SQL Injection |
|---|
| 설명 | A vulnerability, which was classified as high severity, has been found in drogon up to 1.9.13. Affected by this issue is the Criteria JSON constructor of the ORM component, as reachable through the filter JSON body parameter in controllers generated by the drogon_ctl RESTful controller template. The manipulation of the unsanitized operator string leads to SQL injection via unsafe string concatenation in the WHERE clause, enabling WHERE condition bypass and boolean blind extraction. The attack may be launched remotely without authentication when the generated controller is deployed without an authentication filter (the default for the drogon_ctl scaffold). No fix is currently available. It is recommended to apply an operator whitelist in the Criteria constructor and avoid passing untrusted input to makeCriteria() until an upstream patch is released. The identifier of this vulnerability is pending assignment. |
|---|
| 원천 | ⚠️ https://gist.github.com/2H-K/bf8328f70f72196545b0d9589367cb6a |
|---|
| 사용자 | hacja (UID 92094) |
|---|
| 제출 | 2026. 07. 17. AM 11:00 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 09. 20. PM 10:15 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 408059 [drogonframework drogon 까지 1.9.13 ORM orm_lib/src/Criteria.cc makeCriteria filter SQL 주입] |
|---|
| 포인트들 | 20 |
|---|