CVE-2024-47881: Jdbc Uri Ssp Parameter Injection
Constructing a JDBC URI dynamically by passing unsanitized input as the Schema Specific Part (SSP) can lead to parameter injection. Attackers can embed query parameters (e.g., '?enable_load_extension=true' for SQLite) to alter database connection behavior or potentially execute arbitrary code. Ensure user input does not contain '?' characters, or append expl
Javagreprules fetch cve-2024-47881-jdbc-uri-ssp-parameter-injection --engine opengrepDescription
Constructing a JDBC URI dynamically by passing unsanitized input as the Schema Specific Part (SSP) can lead to parameter injection. Attackers can embed query parameters (e.g., '?enable_load_extension=true' for SQLite) to alter database connection behavior or potentially execute arbitrary code. Ensure user input does not contain '?' characters, or append expl
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.