sqlalchemy-flask-relationship
The application might dynamically evaluate untrusted input, which can lead to a code injection vulnerability. An attacker can execute arbitrary code, potentially gaining complete control of the system. Don’t pass untrusted data to this relationship argument, it’s getting passed to eval
.
Likelihood: HIGH
Confidence: HIGH
CWE:
- CWE-94: Improper Control of Generation of Code (‘Code Injection’)
OWASP:
- A03:2021 - Injection
sqlalchemy-flask-relationship
The application might dynamically evaluate untrusted input, which can lead to a code injection vulnerability. An attacker can execute arbitrary code, potentially gaining complete control of the system. Don’t pass untrusted data to this relationship argument, it’s getting passed to eval
.
Likelihood: HIGH
Confidence: HIGH
CWE:
- CWE-94: Improper Control of Generation of Code (‘Code Injection’)
OWASP:
- A03:2021 - Injection