Product: SonarQube Enterprise 9.5.0.56709 Rule: RSPEC-3649 Multiple SQL injections were found in the application by manual testing, but these were not detected by a Sonar scan. I cannot share the full source code of the application, but here are the relevant parts for the code flow for the SQL in…

Basic SQL injection not detected in JS files

Loris (Loris Sierra) August 29, 2022, 9:32am 10

Hey,

For the record: Unfortunately, it’s closed-source, but I created SONARSEC-3263 to report and track this issue internally.

Have a good day!

Loris