Code Security Finding: SQL Injection (CWE-89, High Severity) in SQLInjectionServlet.java:69

[joshn-whitesource-app]

Code Security Finding

This finding was first detected on 2024-02-15 10:29pm GMT and is still present in the last scan performed on 2024-02-15 10:28pm GMT:

Severity	Vulnerability Type	CWE	File	Data Flows
High	SQL Injection	CWE-89	SQLInjectionServlet.java:69	1
Vulnerable Code easybuggy3/src/main/java/org/t246osslab/easybuggy/vulnerabilities/SQLInjectionServlet.java Lines 64 to 69 in fe0933f ResultSet rs = null; String result = getErrMsg("msg.error.user.not.exist", req.getLocale()); try { conn = DBClient.getConnection(); stmt = conn.createStatement(); rs = stmt.executeQuery("SELECT name, secret FROM users WHERE ispublic = 'true' AND name='" + name 1 Data Flow/s detected easybuggy3/src/main/java/org/t246osslab/easybuggy/vulnerabilities/SQLInjectionServlet.java Line 28 in fe0933f String password = StringUtils.trim(req.getParameter("password")); easybuggy3/src/main/java/org/t246osslab/easybuggy/vulnerabilities/SQLInjectionServlet.java Line 28 in fe0933f String password = StringUtils.trim(req.getParameter("password")); easybuggy3/src/main/java/org/t246osslab/easybuggy/vulnerabilities/SQLInjectionServlet.java Line 28 in fe0933f String password = StringUtils.trim(req.getParameter("password")); easybuggy3/src/main/java/org/t246osslab/easybuggy/vulnerabilities/SQLInjectionServlet.java Line 45 in fe0933f bodyHtml.append(selectUsers(name, password, req)); easybuggy3/src/main/java/org/t246osslab/easybuggy/vulnerabilities/SQLInjectionServlet.java Line 60 in fe0933f private String selectUsers(String name, String password, HttpServletRequest req) { easybuggy3/src/main/java/org/t246osslab/easybuggy/vulnerabilities/SQLInjectionServlet.java Line 69 in fe0933f rs = stmt.executeQuery("SELECT name, secret FROM users WHERE ispublic = 'true' AND name='" + name easybuggy3/src/main/java/org/t246osslab/easybuggy/vulnerabilities/SQLInjectionServlet.java Line 69 in fe0933f rs = stmt.executeQuery("SELECT name, secret FROM users WHERE ispublic = 'true' AND name='" + name Secure Code Warrior Training Material ● Training    ▪ Secure Code Warrior SQL Injection Training ● Videos    ▪ Secure Code Warrior SQL Injection Video ● Further Reading    ▪ OWASP SQL Injection Prevention Cheat Sheet    ▪ OWASP SQL Injection    ▪ OWASP Query Parameterization Cheat Sheet 🏴 Suppress Finding ... as False Alarm ... as Acceptable Risk