Description
ChirpStack-s SQLite-backend device tag filtering (chirpstack/src/storage/device.rs, in both get_count and list) interpolates the user-supplied tag KEY directly into a raw SQL fragment via Rust-s format! macro , while only the tag VALUE is safely parameter-bound via Diesel-s .bind.
CVSS 6.5EPSS 0.22699999999999998%Risque 0.66
Voir la source- Publication
- 2026-08-05 13:24:52
- Dernière modification
- 2026-08-10 12:17:30
- Vecteur
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N