Added sql injection on separate file #5
Conversation
Wiz Scan Summary
To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension. |
|
|
||
| user_id = request.query_params.get("user_id") | ||
| # SQL injection vulnerability - directly concatenating user input | ||
| query = f"SELECT * FROM users WHERE id = '{user_id}'" |
There was a problem hiding this comment.
Unparameterized SQL Query with User Input (CWE-915)
More Details
This rule detects instances where user input is used to manually construct a SQL query string. Manually constructing SQL queries with user input is a dangerous practice that can lead to SQL injection vulnerabilities. SQL injection is a technique where malicious SQL statements are inserted into application entries to gain unauthorized access to the database.
SQL injection attacks can allow an attacker to view, modify, or delete data from the database, escalate privileges, execute remote commands, and potentially compromise the entire application. Even if the input is sanitized, it is still risky to concatenate user input into SQL queries as it can lead to logic errors and vulnerabilities.
To avoid SQL injection, it is recommended to use parameterized queries or an object-relational mapping (ORM) library instead of manually constructing SQL queries with user input. Parameterized queries separate the query logic from the user input, preventing the input from being interpreted as part of the SQL statement.
| Attribute | Value |
|---|---|
| Impact |  |
| Likelihood |  |
Rule ID: WS-I013-PYTHON-00078
No description provided.