Description
Helical Insight through 7.0.0 contains an sql injection vulnerability that allows authenticated viewers to inject SQL through unescaped report parameter values sent to /executeDatasource. Attackers can supply crafted Numeric or String placeholder values that bypass the broken SqlDetect guard to read unexposed tables and modify data in the report's data source.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
helicalinsight helicalinsight
Default version status: unaffected
0 to ≤ 7.0.0affected
pkg:github/helicalinsight/helicalinsightReferences
- https://hackmd.io/@hieuPenguinnn/helicalinsight-efwd-parameter-sqli ↗
- https://github.com/helicalinsight/helicalinsight/blob/v7.0.0/server/core/src/main/java/com/helicalinsight/datasource/EfwdQueryProcessor.java#L220-L235 ↗
- https://www.vulncheck.com/advisories/helical-insight-through-7.0.0-sql-injection-via-executedatasource ↗