Security Vulnerability Report
Discovered by: SuyZ (UIT — University of Information Technology, Ho Chi Minh City)
I've discovered a SQL injection vulnerability through the sortBy query parameter. implementations.go:119 concatenates sortBy + " " + sortOrder directly into GORM db.Order() without validation. The values come from handlers.go:919-920 via c.Query().
CWE-89 | 11/11 Go test PoC PASS | API key + password hash extraction proven
I have a complete PoC. Since this repo has no SECURITY.md or private vulnerability reporting, please enable GitHub Private Vulnerability Reporting or provide a security contact email so I can share full details privately.
Security Vulnerability Report
Discovered by: SuyZ (UIT — University of Information Technology, Ho Chi Minh City)
I've discovered a SQL injection vulnerability through the
sortByquery parameter.implementations.go:119concatenatessortBy + " " + sortOrderdirectly into GORMdb.Order()without validation. The values come fromhandlers.go:919-920viac.Query().CWE-89 | 11/11 Go test PoC PASS | API key + password hash extraction proven
I have a complete PoC. Since this repo has no SECURITY.md or private vulnerability reporting, please enable GitHub Private Vulnerability Reporting or provide a security contact email so I can share full details privately.