Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

CQL identifiers=")" fails with "invalid regular expression: parentheses () not balanced" SQL Injection

Description

The CQL query

is valid, parentheses need no masking inside of quotes.

Apply urlencoding:

Invoke curl:

There is SQL injection resulting in this error message:

This is the produced SQL:

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

None

Checklist

hide

TestRail: Results

Activity

Show:

Julian Ladisch June 12, 2019 at 3:40 PM

Jakub Skoczen June 12, 2019 at 9:43 AM

has this been fixed in RMB 25?

Done

Details

Assignee

Reporter

Labels

Priority

Story Points

Sprint

Development Team

Core: Platform

Fix versions

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs

Created June 6, 2019 at 1:35 PM
Updated June 14, 2019 at 2:20 PM
Resolved June 12, 2019 at 3:40 PM
TestRail: Cases
TestRail: Runs