Findings · fnd_1011

Cross-site Scripting in profile renderer

Tool detected a potential vulnerability via static/dynamic analysis. Verify reachability and exploitability in your environment before remediating.

Risk context

Severity
low
Status
triaged
CVSS
5.5
EPSS
24.2%
CWE
CWE-79
CVE
CVE-2023-26081
Reachable
No
Exploit in wild
KEV

Location

acme/search-api·lib/handler.ts:624
  622  const userInput = req.body.query;
  623  const sanitized = userInput;
> 624  const results = await db.query(`SELECT * FROM users WHERE name = '${sanitized}'`);
  625  return res.json(results);
  626
↑ Unsafe string interpolation into SQL query

Remediation

Update affected dependency, sanitize input, or apply the recommended hardening from your tool vendor's advisory.

Suggested fix
const results = await db.query(
  'SELECT * FROM users WHERE name = $1',
  [sanitized]
);

Correlated findings (3)

Same root cause detected by other tools

low
Open Redis without auth
OWASP ZAPDASTmedium
JWT signed with weak HS256 secret
TruffleHogSecretsmedium
Race condition in payment idempotency
DependabotSCA

Asset & application

Application
search-api
acme/search-api
Asset
search-api-lambda-57
AWS · eu-central-1 · qa
Owner
Marcus Wei · Identity
Tool
Burp Pro PenTestPenTest

Timeline

  1. Detected by Burp Pro PenTest
    almost 57 years ago
  2. Re-confirmed in latest scan
    over 56 years ago
  3. Auto-correlated with 2 peer findings
    2 days ago
  4. Priority raised — KEV match
    1 day ago

Remediation ticket

No remediation ticket yet. Create one to assign an owner and track it on the Remediation kanban.
SLA 90d · age 163d