mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
1207 lines
33 KiB
JSON
1207 lines
33 KiB
JSON
|
{
|
||
|
|
"protocol": "protocol-v2.md",
|
||
|
|
"cases_scored": 17,
|
||
|
|
"cases_incomplete": [],
|
||
|
|
"recall": [
|
||
|
|
1,
|
||
|
|
17
|
||
|
|
],
|
||
|
|
"recall_wilson95": [
|
||
|
|
0.01,
|
||
|
|
0.27
|
||
|
|
],
|
||
|
|
"unstable_detections": [],
|
||
|
|
"fixed_side_alerts": 1,
|
||
|
|
"benign_alerts": 16,
|
||
|
|
"completion": [
|
||
|
|
368,
|
||
|
|
408
|
||
|
|
],
|
||
|
|
"stability": [
|
||
|
|
846,
|
||
|
|
1159
|
||
|
|
],
|
||
|
|
"pooled_stable_vulnerable_findings": 40,
|
||
|
|
"unstable_vulnerable_findings": 163,
|
||
|
|
"precision_sample_size": 14,
|
||
|
|
"cases": [
|
||
|
|
{
|
||
|
|
"id": "pgadmin-maintenance-sqli",
|
||
|
|
"family": "injection",
|
||
|
|
"language": "python",
|
||
|
|
"detected": false,
|
||
|
|
"detected_sites": [],
|
||
|
|
"unstable": false,
|
||
|
|
"unstable_sites": [],
|
||
|
|
"unanswered": true,
|
||
|
|
"instrument_errors": {},
|
||
|
|
"fixed_side_alerts": [],
|
||
|
|
"benign_alerts": [],
|
||
|
|
"stability": {
|
||
|
|
"vulnerable": [
|
||
|
|
21,
|
||
|
|
31
|
||
|
|
],
|
||
|
|
"fixed": [
|
||
|
|
43,
|
||
|
|
51
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"completion": {
|
||
|
|
"vulnerable_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"vulnerable_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_base": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_tip": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"seconds": {
|
||
|
|
"vulnerable_a": 122.5,
|
||
|
|
"vulnerable_b": 143.5,
|
||
|
|
"fixed_a": 133.3,
|
||
|
|
"fixed_b": 145.2,
|
||
|
|
"benign_base": 143.5,
|
||
|
|
"benign_tip": 114.1
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "qwed-sympy-eval",
|
||
|
|
"family": "injection",
|
||
|
|
"language": "python",
|
||
|
|
"detected": false,
|
||
|
|
"detected_sites": [],
|
||
|
|
"unstable": false,
|
||
|
|
"unstable_sites": [],
|
||
|
|
"unanswered": true,
|
||
|
|
"instrument_errors": {},
|
||
|
|
"fixed_side_alerts": [],
|
||
|
|
"benign_alerts": [],
|
||
|
|
"stability": {
|
||
|
|
"vulnerable": [
|
||
|
|
48,
|
||
|
|
59
|
||
|
|
],
|
||
|
|
"fixed": [
|
||
|
|
44,
|
||
|
|
50
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"completion": {
|
||
|
|
"vulnerable_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"vulnerable_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_base": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_tip": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"seconds": {
|
||
|
|
"vulnerable_a": 55.0,
|
||
|
|
"vulnerable_b": 54.2,
|
||
|
|
"fixed_a": 50.5,
|
||
|
|
"fixed_b": 48.7,
|
||
|
|
"benign_base": 55.0,
|
||
|
|
"benign_tip": 53.1
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "contextforge-prompt-ssti",
|
||
|
|
"family": "injection",
|
||
|
|
"language": "python",
|
||
|
|
"detected": false,
|
||
|
|
"detected_sites": [],
|
||
|
|
"unstable": false,
|
||
|
|
"unstable_sites": [],
|
||
|
|
"unanswered": true,
|
||
|
|
"instrument_errors": {},
|
||
|
|
"fixed_side_alerts": [],
|
||
|
|
"benign_alerts": [],
|
||
|
|
"stability": {
|
||
|
|
"vulnerable": [
|
||
|
|
37,
|
||
|
|
48
|
||
|
|
],
|
||
|
|
"fixed": [
|
||
|
|
19,
|
||
|
|
34
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"completion": {
|
||
|
|
"vulnerable_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"vulnerable_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_base": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_tip": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"seconds": {
|
||
|
|
"vulnerable_a": 120.8,
|
||
|
|
"vulnerable_b": 119.2,
|
||
|
|
"fixed_a": 116.6,
|
||
|
|
"fixed_b": 115.4,
|
||
|
|
"benign_base": 109.5,
|
||
|
|
"benign_tip": 110.1
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "lmdeploy-media-url-ssrf",
|
||
|
|
"family": "untrusted_destination",
|
||
|
|
"language": "python",
|
||
|
|
"detected": false,
|
||
|
|
"detected_sites": [],
|
||
|
|
"unstable": false,
|
||
|
|
"unstable_sites": [],
|
||
|
|
"unanswered": true,
|
||
|
|
"instrument_errors": {},
|
||
|
|
"fixed_side_alerts": [],
|
||
|
|
"benign_alerts": [],
|
||
|
|
"stability": {
|
||
|
|
"vulnerable": [
|
||
|
|
29,
|
||
|
|
42
|
||
|
|
],
|
||
|
|
"fixed": [
|
||
|
|
29,
|
||
|
|
43
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"completion": {
|
||
|
|
"vulnerable_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"vulnerable_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_base": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_tip": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"seconds": {
|
||
|
|
"vulnerable_a": 62.3,
|
||
|
|
"vulnerable_b": 60.8,
|
||
|
|
"fixed_a": 57.2,
|
||
|
|
"fixed_b": 58.3,
|
||
|
|
"benign_base": 64.6,
|
||
|
|
"benign_tip": 64.6
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "winml-cli-serve-cors",
|
||
|
|
"family": "config_secrets",
|
||
|
|
"language": "python",
|
||
|
|
"detected": false,
|
||
|
|
"detected_sites": [],
|
||
|
|
"unstable": false,
|
||
|
|
"unstable_sites": [],
|
||
|
|
"unanswered": true,
|
||
|
|
"instrument_errors": {},
|
||
|
|
"fixed_side_alerts": [],
|
||
|
|
"benign_alerts": [
|
||
|
|
"src/winml/modelkit/analyze/models/onnx_model.py:1:",
|
||
|
|
"src/winml/modelkit/analyze/onnx_opset/_impl/opset_ai_onnx_preview_training1.py:1:",
|
||
|
|
"src/winml/modelkit/analyze/onnx_opset/_impl/opset_com_microsoft1.py:1:",
|
||
|
|
"src/winml/modelkit/analyze/runtime_checker/runner.py:1:",
|
||
|
|
"src/winml/modelkit/analyze/utils/avalizble_ep_device_ops/case_index_key_codec.py:1:"
|
||
|
|
],
|
||
|
|
"stability": {
|
||
|
|
"vulnerable": [
|
||
|
|
24,
|
||
|
|
28
|
||
|
|
],
|
||
|
|
"fixed": [
|
||
|
|
22,
|
||
|
|
24
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"completion": {
|
||
|
|
"vulnerable_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"vulnerable_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_base": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_tip": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"seconds": {
|
||
|
|
"vulnerable_a": 63.3,
|
||
|
|
"vulnerable_b": 70.0,
|
||
|
|
"fixed_a": 72.0,
|
||
|
|
"fixed_b": 60.8,
|
||
|
|
"benign_base": 64.6,
|
||
|
|
"benign_tip": 68.4
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "reactpress-findall-column-sqli",
|
||
|
|
"family": "injection",
|
||
|
|
"language": "typescript",
|
||
|
|
"detected": false,
|
||
|
|
"detected_sites": [],
|
||
|
|
"unstable": false,
|
||
|
|
"unstable_sites": [],
|
||
|
|
"unanswered": true,
|
||
|
|
"instrument_errors": {},
|
||
|
|
"fixed_side_alerts": [],
|
||
|
|
"benign_alerts": [
|
||
|
|
"cli/bin/reactpress.js:341:",
|
||
|
|
"cli/lib/dev-banner.js:1:"
|
||
|
|
],
|
||
|
|
"stability": {
|
||
|
|
"vulnerable": [
|
||
|
|
30,
|
||
|
|
41
|
||
|
|
],
|
||
|
|
"fixed": [
|
||
|
|
16,
|
||
|
|
28
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"completion": {
|
||
|
|
"vulnerable_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"vulnerable_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_base": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_tip": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"seconds": {
|
||
|
|
"vulnerable_a": 51.8,
|
||
|
|
"vulnerable_b": 593.6,
|
||
|
|
"fixed_a": 49.1,
|
||
|
|
"fixed_b": 47.7,
|
||
|
|
"benign_base": 51.8,
|
||
|
|
"benign_tip": 54.4
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "fuxa-tdengine-escape-sqli",
|
||
|
|
"family": "injection",
|
||
|
|
"language": "javascript",
|
||
|
|
"detected": false,
|
||
|
|
"detected_sites": [],
|
||
|
|
"unstable": false,
|
||
|
|
"unstable_sites": [],
|
||
|
|
"unanswered": true,
|
||
|
|
"instrument_errors": {
|
||
|
|
"vulnerable_a": "no hunt completed: OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request",
|
||
|
|
"vulnerable_b": "no hunt completed: OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request",
|
||
|
|
"fixed_a": "no hunt completed: OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request",
|
||
|
|
"fixed_b": "no hunt completed: OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request",
|
||
|
|
"benign_base": "no hunt completed: OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request",
|
||
|
|
"benign_tip": "no hunt completed: OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request"
|
||
|
|
},
|
||
|
|
"fixed_side_alerts": [],
|
||
|
|
"benign_alerts": [],
|
||
|
|
"stability": {
|
||
|
|
"vulnerable": [
|
||
|
|
0,
|
||
|
|
0
|
||
|
|
],
|
||
|
|
"fixed": [
|
||
|
|
0,
|
||
|
|
0
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"completion": {
|
||
|
|
"vulnerable_a": [
|
||
|
|
0,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"vulnerable_b": [
|
||
|
|
0,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_a": [
|
||
|
|
0,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_b": [
|
||
|
|
0,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_base": [
|
||
|
|
0,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_tip": [
|
||
|
|
0,
|
||
|
|
4
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"seconds": {
|
||
|
|
"vulnerable_a": 78.9,
|
||
|
|
"vulnerable_b": 86.6,
|
||
|
|
"fixed_a": 78.3,
|
||
|
|
"fixed_b": 98.5,
|
||
|
|
"benign_base": 104.8,
|
||
|
|
"benign_tip": 102.9
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "budibase-mongo-template-nosqli",
|
||
|
|
"family": "injection",
|
||
|
|
"language": "typescript",
|
||
|
|
"detected": false,
|
||
|
|
"detected_sites": [],
|
||
|
|
"unstable": false,
|
||
|
|
"unstable_sites": [],
|
||
|
|
"unanswered": true,
|
||
|
|
"instrument_errors": {},
|
||
|
|
"fixed_side_alerts": [],
|
||
|
|
"benign_alerts": [
|
||
|
|
"packages/backend-core/src/context/mainContext.ts:34:",
|
||
|
|
"packages/backend-core/src/context/mainContext.ts:45:",
|
||
|
|
"packages/backend-core/src/context/mainContext.ts:54:"
|
||
|
|
],
|
||
|
|
"stability": {
|
||
|
|
"vulnerable": [
|
||
|
|
33,
|
||
|
|
41
|
||
|
|
],
|
||
|
|
"fixed": [
|
||
|
|
35,
|
||
|
|
44
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"completion": {
|
||
|
|
"vulnerable_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"vulnerable_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_base": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_tip": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"seconds": {
|
||
|
|
"vulnerable_a": 115.0,
|
||
|
|
"vulnerable_b": 107.9,
|
||
|
|
"fixed_a": 110.8,
|
||
|
|
"fixed_b": 118.6,
|
||
|
|
"benign_base": 100.8,
|
||
|
|
"benign_tip": 104.3
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "unleash-addon-webhook-ssrf",
|
||
|
|
"family": "untrusted_destination",
|
||
|
|
"language": "typescript",
|
||
|
|
"detected": false,
|
||
|
|
"detected_sites": [],
|
||
|
|
"unstable": false,
|
||
|
|
"unstable_sites": [],
|
||
|
|
"unanswered": true,
|
||
|
|
"instrument_errors": {},
|
||
|
|
"fixed_side_alerts": [],
|
||
|
|
"benign_alerts": [
|
||
|
|
"frontend/src/component/App.tsx:56:",
|
||
|
|
"frontend/src/component/admin/Admin.tsx:30:"
|
||
|
|
],
|
||
|
|
"stability": {
|
||
|
|
"vulnerable": [
|
||
|
|
23,
|
||
|
|
33
|
||
|
|
],
|
||
|
|
"fixed": [
|
||
|
|
15,
|
||
|
|
30
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"completion": {
|
||
|
|
"vulnerable_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"vulnerable_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_base": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_tip": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"seconds": {
|
||
|
|
"vulnerable_a": 61.2,
|
||
|
|
"vulnerable_b": 80.1,
|
||
|
|
"fixed_a": 65.3,
|
||
|
|
"fixed_b": 67.3,
|
||
|
|
"benign_base": 70.7,
|
||
|
|
"benign_tip": 88.1
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "medplum-external-auth-open-redirect",
|
||
|
|
"family": "untrusted_destination",
|
||
|
|
"language": "typescript",
|
||
|
|
"detected": false,
|
||
|
|
"detected_sites": [],
|
||
|
|
"unstable": false,
|
||
|
|
"unstable_sites": [],
|
||
|
|
"unanswered": true,
|
||
|
|
"instrument_errors": {},
|
||
|
|
"fixed_side_alerts": [],
|
||
|
|
"benign_alerts": [],
|
||
|
|
"stability": {
|
||
|
|
"vulnerable": [
|
||
|
|
24,
|
||
|
|
31
|
||
|
|
],
|
||
|
|
"fixed": [
|
||
|
|
12,
|
||
|
|
27
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"completion": {
|
||
|
|
"vulnerable_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"vulnerable_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_base": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_tip": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"seconds": {
|
||
|
|
"vulnerable_a": 67.9,
|
||
|
|
"vulnerable_b": 69.4,
|
||
|
|
"fixed_a": 55.4,
|
||
|
|
"fixed_b": 67.3,
|
||
|
|
"benign_base": 61.7,
|
||
|
|
"benign_tip": 61.1
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "cct-studio-server-cmdi",
|
||
|
|
"family": "injection",
|
||
|
|
"language": "javascript",
|
||
|
|
"detected": false,
|
||
|
|
"detected_sites": [],
|
||
|
|
"unstable": false,
|
||
|
|
"unstable_sites": [],
|
||
|
|
"unanswered": true,
|
||
|
|
"instrument_errors": {},
|
||
|
|
"fixed_side_alerts": [],
|
||
|
|
"benign_alerts": [],
|
||
|
|
"stability": {
|
||
|
|
"vulnerable": [
|
||
|
|
37,
|
||
|
|
48
|
||
|
|
],
|
||
|
|
"fixed": [
|
||
|
|
38,
|
||
|
|
49
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"completion": {
|
||
|
|
"vulnerable_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"vulnerable_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_base": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_tip": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"seconds": {
|
||
|
|
"vulnerable_a": 127.5,
|
||
|
|
"vulnerable_b": 126.1,
|
||
|
|
"fixed_a": 119.9,
|
||
|
|
"fixed_b": 117.7,
|
||
|
|
"benign_base": 136.8,
|
||
|
|
"benign_tip": 131.9
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "wp-gopay-log-filter-sqli",
|
||
|
|
"family": "injection",
|
||
|
|
"language": "php",
|
||
|
|
"detected": true,
|
||
|
|
"detected_sites": [
|
||
|
|
"admin/views/log.php:13:",
|
||
|
|
"admin/views/log.php:22:"
|
||
|
|
],
|
||
|
|
"unstable": false,
|
||
|
|
"unstable_sites": [
|
||
|
|
"admin/views/log.php:14:",
|
||
|
|
"admin/views/log.php:30:",
|
||
|
|
"admin/views/log.php:41:"
|
||
|
|
],
|
||
|
|
"unanswered": false,
|
||
|
|
"instrument_errors": {},
|
||
|
|
"fixed_side_alerts": [
|
||
|
|
"admin/views/log.php:14:"
|
||
|
|
],
|
||
|
|
"benign_alerts": [],
|
||
|
|
"stability": {
|
||
|
|
"vulnerable": [
|
||
|
|
25,
|
||
|
|
34
|
||
|
|
],
|
||
|
|
"fixed": [
|
||
|
|
15,
|
||
|
|
24
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"completion": {
|
||
|
|
"vulnerable_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"vulnerable_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_base": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_tip": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"seconds": {
|
||
|
|
"vulnerable_a": 43.5,
|
||
|
|
"vulnerable_b": 43.5,
|
||
|
|
"fixed_a": 39.2,
|
||
|
|
"fixed_b": 43.7,
|
||
|
|
"benign_base": 41.7,
|
||
|
|
"benign_tip": 44.7
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "wp-user-registration-login-redirect",
|
||
|
|
"family": "untrusted_destination",
|
||
|
|
"language": "php",
|
||
|
|
"detected": false,
|
||
|
|
"detected_sites": [],
|
||
|
|
"unstable": false,
|
||
|
|
"unstable_sites": [],
|
||
|
|
"unanswered": true,
|
||
|
|
"instrument_errors": {},
|
||
|
|
"fixed_side_alerts": [],
|
||
|
|
"benign_alerts": [],
|
||
|
|
"stability": {
|
||
|
|
"vulnerable": [
|
||
|
|
18,
|
||
|
|
35
|
||
|
|
],
|
||
|
|
"fixed": [
|
||
|
|
29,
|
||
|
|
45
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"completion": {
|
||
|
|
"vulnerable_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"vulnerable_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_base": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_tip": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"seconds": {
|
||
|
|
"vulnerable_a": 56.0,
|
||
|
|
"vulnerable_b": 70.5,
|
||
|
|
"fixed_a": 72.4,
|
||
|
|
"fixed_b": 53.9,
|
||
|
|
"benign_base": 58.6,
|
||
|
|
"benign_tip": 65.8
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "wp-directorist-avatar-ssrf",
|
||
|
|
"family": "untrusted_destination",
|
||
|
|
"language": "php",
|
||
|
|
"detected": false,
|
||
|
|
"detected_sites": [],
|
||
|
|
"unstable": false,
|
||
|
|
"unstable_sites": [],
|
||
|
|
"unanswered": true,
|
||
|
|
"instrument_errors": {
|
||
|
|
"vulnerable_a": "no hunt completed: OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request",
|
||
|
|
"vulnerable_b": "no hunt completed: OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request",
|
||
|
|
"fixed_a": "no hunt completed: OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request; OpenRouterError: OpenRouter chat request failed: HTTPError: HTTP Error 400: Bad Request"
|
||
|
|
},
|
||
|
|
"fixed_side_alerts": [],
|
||
|
|
"benign_alerts": [
|
||
|
|
"assets/js/add-listing.min.js:1:",
|
||
|
|
"assets/js/admin-extension-update.min.js:1:",
|
||
|
|
"includes/classes/class-add-listing.php:456:",
|
||
|
|
"includes/classes/class-add-listing.php:954:"
|
||
|
|
],
|
||
|
|
"stability": {
|
||
|
|
"vulnerable": [
|
||
|
|
0,
|
||
|
|
0
|
||
|
|
],
|
||
|
|
"fixed": [
|
||
|
|
37,
|
||
|
|
37
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"completion": {
|
||
|
|
"vulnerable_a": [
|
||
|
|
0,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"vulnerable_b": [
|
||
|
|
0,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_a": [
|
||
|
|
0,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_b": [
|
||
|
|
1,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_base": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_tip": [
|
||
|
|
3,
|
||
|
|
4
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"seconds": {
|
||
|
|
"vulnerable_a": 126.4,
|
||
|
|
"vulnerable_b": 96.4,
|
||
|
|
"fixed_a": 98.3,
|
||
|
|
"fixed_b": 136.2,
|
||
|
|
"benign_base": 102.5,
|
||
|
|
"benign_tip": 112.5
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "wp-groundhogg-confirm-redirect",
|
||
|
|
"family": "untrusted_destination",
|
||
|
|
"language": "php",
|
||
|
|
"detected": false,
|
||
|
|
"detected_sites": [],
|
||
|
|
"unstable": false,
|
||
|
|
"unstable_sites": [],
|
||
|
|
"unanswered": true,
|
||
|
|
"instrument_errors": {},
|
||
|
|
"fixed_side_alerts": [],
|
||
|
|
"benign_alerts": [],
|
||
|
|
"stability": {
|
||
|
|
"vulnerable": [
|
||
|
|
31,
|
||
|
|
39
|
||
|
|
],
|
||
|
|
"fixed": [
|
||
|
|
33,
|
||
|
|
45
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"completion": {
|
||
|
|
"vulnerable_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"vulnerable_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_base": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_tip": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"seconds": {
|
||
|
|
"vulnerable_a": 56.7,
|
||
|
|
"vulnerable_b": 55.4,
|
||
|
|
"fixed_a": 55.6,
|
||
|
|
"fixed_b": 51.1,
|
||
|
|
"benign_base": 59.7,
|
||
|
|
"benign_tip": 55.1
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "froxlor-admin-ip-second-order-sqli",
|
||
|
|
"family": "injection",
|
||
|
|
"language": "php",
|
||
|
|
"detected": false,
|
||
|
|
"detected_sites": [],
|
||
|
|
"unstable": false,
|
||
|
|
"unstable_sites": [],
|
||
|
|
"unanswered": true,
|
||
|
|
"instrument_errors": {},
|
||
|
|
"fixed_side_alerts": [],
|
||
|
|
"benign_alerts": [],
|
||
|
|
"stability": {
|
||
|
|
"vulnerable": [
|
||
|
|
38,
|
||
|
|
46
|
||
|
|
],
|
||
|
|
"fixed": [
|
||
|
|
25,
|
||
|
|
36
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"completion": {
|
||
|
|
"vulnerable_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"vulnerable_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_base": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_tip": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"seconds": {
|
||
|
|
"vulnerable_a": 51.2,
|
||
|
|
"vulnerable_b": 44.9,
|
||
|
|
"fixed_a": 48.4,
|
||
|
|
"fixed_b": 43.5,
|
||
|
|
"benign_base": 23.5,
|
||
|
|
"benign_tip": 24.9
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "sulu-smart-content-sql2-injection",
|
||
|
|
"family": "injection",
|
||
|
|
"language": "php",
|
||
|
|
"detected": false,
|
||
|
|
"detected_sites": [],
|
||
|
|
"unstable": false,
|
||
|
|
"unstable_sites": [],
|
||
|
|
"unanswered": true,
|
||
|
|
"instrument_errors": {},
|
||
|
|
"fixed_side_alerts": [],
|
||
|
|
"benign_alerts": [],
|
||
|
|
"stability": {
|
||
|
|
"vulnerable": [
|
||
|
|
4,
|
||
|
|
16
|
||
|
|
],
|
||
|
|
"fixed": [
|
||
|
|
12,
|
||
|
|
20
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"completion": {
|
||
|
|
"vulnerable_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"vulnerable_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_a": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"fixed_b": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_base": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
],
|
||
|
|
"benign_tip": [
|
||
|
|
4,
|
||
|
|
4
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"seconds": {
|
||
|
|
"vulnerable_a": 69.7,
|
||
|
|
"vulnerable_b": 73.3,
|
||
|
|
"fixed_a": 73.7,
|
||
|
|
"fixed_b": 72.9,
|
||
|
|
"benign_base": 86.1,
|
||
|
|
"benign_tip": 84.1
|
||
|
|
}
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"precision_sample": [
|
||
|
|
{
|
||
|
|
"case": "budibase-mongo-template-nosqli",
|
||
|
|
"site": "packages/backend-core/src/configs/configs.ts:158:",
|
||
|
|
"family": "injection",
|
||
|
|
"model_family": "url-injection",
|
||
|
|
"title": "Tenant ID interpolated into platform URL host without validation",
|
||
|
|
"witness": "getPlatformUrl builds the tenant-aware platform URL via platformUrl.replace(\"://\", `://${tenantId}.`) using context.getTenantId(). The tenant ID is derived from request context (mainContext.getTenantId / getTenantIDFromWorkspaceID splits workspace IDs) and is not validated or encoded before being placed into the URL authority. A tenant ID containing characters such as '/', '@', ':', or '#' could a",
|
||
|
|
"verdict": "False, not attacker",
|
||
|
|
"reason": "tenant id from request context not shown attacker-controlled"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"case": "cct-studio-server-cmdi",
|
||
|
|
"site": "api/claude-code-monitor/parser.js:14:",
|
||
|
|
"family": "injection",
|
||
|
|
"model_family": "regex-injection",
|
||
|
|
"title": "RegExp constructed from version string (regex injection / ReDoS)",
|
||
|
|
"witness": "parseVersionChangelog builds `new RegExp(`^##\\\\s+(?:v)?${cleanVersion.replace(/\\./g, '\\\\.')}`, 'm')` from the `version` argument. Only dots are escaped; other regex metacharacters pass through unescaped, so a crafted version string can alter the pattern, cause a SyntaxError, or trigger catastrophic backtracking (ReDoS) against the changelog. The same pattern is duplicated in api/_parser-claude.js ",
|
||
|
|
"verdict": "False, not attacker",
|
||
|
|
"reason": "regex built from an internal changelog version"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"case": "contextforge-prompt-ssti",
|
||
|
|
"site": "mcp-servers/python/data_analysis_server/src/data_analysis_server/utils/query_parser.py:89:",
|
||
|
|
"family": "injection",
|
||
|
|
"model_family": "code-injection",
|
||
|
|
"title": "Arbitrary expression evaluation via pandas DataFrame.query on user-supplied query string",
|
||
|
|
"witness": "execute_query passes the raw user query to _parse_and_execute, which for any non-SELECT input calls df.query(query) directly. pandas query uses numexpr/python eval semantics, so attacker-controlled query text is evaluated as an expression rather than treated as data. The same pattern recurs at lines 257 and 477 (df.query(condition) inside _apply_where_clause and the HAVING handler), so WHERE/HAVIN",
|
||
|
|
"verdict": "True, privileged",
|
||
|
|
"reason": "sample MCP data server passes the caller's query to DataFrame.query"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"case": "contextforge-prompt-ssti",
|
||
|
|
"site": "mcp-servers/python/mcp_eval_server/mcp_eval_server/rest_server.py:829:",
|
||
|
|
"family": "injection",
|
||
|
|
"model_family": "prompt-injection",
|
||
|
|
"title": "agent_benchmark endpoint passes request data to agent tools",
|
||
|
|
"witness": "The handler forwards caller-supplied request fields into AgentTools without visible validation, allowing untrusted input to flow into downstream evaluation logic.",
|
||
|
|
"verdict": "False",
|
||
|
|
"reason": "no sink established ('without visible validation')"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"case": "pgadmin-maintenance-sqli",
|
||
|
|
"site": "runtime/src/js/pgadmin.js:243:",
|
||
|
|
"family": "injection",
|
||
|
|
"model_family": "",
|
||
|
|
"title": "Shell-style command string built from pythonPath/pgadminFile",
|
||
|
|
"witness": "let command = pythonPath + ' -s ' + pgadminFile; concatenates paths into a command string. If this string is ever passed to a shell (e.g. exec/execSync) rather than the argument-array spawn at line 269, the dev_config-controlled paths would allow command injection. Worth verifying all consumers of `command`.",
|
||
|
|
"verdict": "False",
|
||
|
|
"reason": "hypothetical: the string is spawned as an argv array"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"case": "qwed-sympy-eval",
|
||
|
|
"site": "qwed_sdk/guards/mcp_poison_guard.py:162:",
|
||
|
|
"family": "injection",
|
||
|
|
"model_family": "prompt-injection",
|
||
|
|
"title": "MCP tool schema scanning uses fixed injection regex list",
|
||
|
|
"witness": "verify_tool_definition scans descriptions/parameters with a hardcoded _DEFAULT_INJECTION_PATTERNS list plus optional custom patterns; novel injection phrasings not matching these regexes pass, and the guard trusts the schema structure it is given.",
|
||
|
|
"verdict": "False",
|
||
|
|
"reason": "guard regex list incompleteness is not a vulnerability"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"case": "reactpress-findall-column-sqli",
|
||
|
|
"site": "cli/lib/dev.js:79:",
|
||
|
|
"family": "injection",
|
||
|
|
"model_family": "command-injection",
|
||
|
|
"title": "spawn with shell:true for client dev",
|
||
|
|
"witness": "spawnClient runs spawn('pnpm', ['run', '--dir', './client', 'dev'], { shell: true, cwd: projectRoot }). With shell:true the argv is joined into a shell command line, so shell metacharacters in the resolved cwd/args can break out of the intended command. The sibling spawnApi at line 43 avoids the shell, making this the outlier.",
|
||
|
|
"verdict": "False, not attacker",
|
||
|
|
"reason": "dev CLI spawn with fixed args"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"case": "reactpress-findall-column-sqli",
|
||
|
|
"site": "cli/lib/publish.js:234:",
|
||
|
|
"family": "injection",
|
||
|
|
"model_family": "command-injection",
|
||
|
|
"title": "execSync with interpolated package name/version",
|
||
|
|
"witness": "execSync(`npm view ${packageName}@${nextVersion} version`, ...) interpolates packageName and nextVersion into a shell command string. If either value is derived from package.json or user input without validation, shell metacharacters would be executed by the shell.",
|
||
|
|
"verdict": "False, not attacker",
|
||
|
|
"reason": "release script interpolates package.json name/version"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"case": "sulu-smart-content-sql2-injection",
|
||
|
|
"site": "src/Sulu/Bundle/AdminBundle/Admin/View/TabViewBuilderInterface.php:27:",
|
||
|
|
"family": "injection",
|
||
|
|
"model_family": "expression-injection",
|
||
|
|
"title": "setTabCondition accepts arbitrary string stored as view option",
|
||
|
|
"witness": "The interface exposes `setTabCondition(string $tabCondition)` (and `addRouterAttributesToBlacklist(array)`) with no validation. Implementations (TabViewChildBuilderTrait.php:21) store the raw string as the `tabCondition` view option, which is later evaluated as a jexl expression on the client \u2014 the entry point through which unvalidated condition strings reach the expression evaluator.",
|
||
|
|
"verdict": "False",
|
||
|
|
"reason": "admin view-builder configuration API"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"case": "sulu-smart-content-sql2-injection",
|
||
|
|
"site": "src/Sulu/Bundle/AdminBundle/Resources/js/components/Number/Number.js:1:",
|
||
|
|
"family": "injection",
|
||
|
|
"model_family": "no-sink",
|
||
|
|
"title": "Number ranked hotspot: no injection sink found",
|
||
|
|
"witness": "Inspected the full component. It parses input with parseFloat, guards NaN, and forwards the numeric value plus event to props.onChange, rendering through the shared Input component. No HTML/script sink, no string concatenation into markup, no URL handling. Ranking is not corroborated by an injection primitive.",
|
||
|
|
"verdict": "False",
|
||
|
|
"reason": "non-finding filed by the model"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"case": "unleash-addon-webhook-ssrf",
|
||
|
|
"site": "frontend/src/component/admin/AdminRedirect.tsx:3:",
|
||
|
|
"family": "untrusted_destination",
|
||
|
|
"model_family": "",
|
||
|
|
"title": "Static Navigate redirect to hardcoded admin path",
|
||
|
|
"witness": "The component renders <Navigate to='/admin/users' replace />. The destination is a hardcoded literal, not derived from user input, query params, or state, so the 'untrusted_destination' ranking is a false positive here. No open-redirect or attacker-controlled navigation sink exists in this file.",
|
||
|
|
"verdict": "False",
|
||
|
|
"reason": "static Navigate target; the model says so"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"case": "winml-cli-serve-cors",
|
||
|
|
"site": "scripts/download_rules.py:83:",
|
||
|
|
"family": "config_secrets",
|
||
|
|
"model_family": "credential_exposure",
|
||
|
|
"title": "GitHub token embedded in clone URL (credential exposure)",
|
||
|
|
"witness": "The gh CLI token is read from `gh auth token` and interpolated directly into a git remote URL (`https://x-access-token:{token}@github.com/...`). This URL is passed to `git clone`, so the live credential can leak into process listings (argv), git error output, shell history, and any logs that echo the command. The token is a full-access credential for the authenticated account, so exposure is high ",
|
||
|
|
"verdict": "False, not attacker",
|
||
|
|
"reason": "local dev script, user's own token"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"case": "wp-gopay-log-filter-sqli",
|
||
|
|
"site": "admin/views/log.php:13:",
|
||
|
|
"family": "injection",
|
||
|
|
"model_family": "sql-injection",
|
||
|
|
"title": "SQL injection via unsanitized log_table_filter in REGEXP query",
|
||
|
|
"witness": "$log_table_filter = filter_input( INPUT_GET, 'log_table_filter' ) is taken raw from the request with no sanitize/escape, then interpolated directly into SQL via sprintf() at lines 22 and 41 and passed to $wpdb->get_results() without $wpdb->prepare(). Only strtoupper() is applied, which does not neutralize SQL metacharacters such as quotes, so an attacker can break out of the REGEXP '[\\w\\W]*%s[\\w\\W",
|
||
|
|
"verdict": "True, privileged",
|
||
|
|
"reason": "the case's CVE: filter_input GET -> sprintf REGEXP -> $wpdb->get_results"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"case": "wp-user-registration-login-redirect",
|
||
|
|
"site": "assets/js/admin/ur-setup.js:711:",
|
||
|
|
"family": "untrusted_destination",
|
||
|
|
"model_family": "untrusted_destination",
|
||
|
|
"title": "Navigation to server-supplied redirectUrl in show_toast_and_reload",
|
||
|
|
"witness": "show_toast_and_reload(redirectUrl) assigns window.location.href = redirectUrl. The value is passed in from callers (e.g. activate_feature_from_settings builds it from window.location.href, but the function itself accepts an arbitrary string and performs a top-level navigation without validation). This is the untrusted_destination sink the ranker flagged.",
|
||
|
|
"verdict": "False, not attacker",
|
||
|
|
"reason": "redirect URL built from window.location.href"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"precision": [
|
||
|
|
2,
|
||
|
|
14
|
||
|
|
],
|
||
|
|
"precision_wilson95": [
|
||
|
|
0.04,
|
||
|
|
0.399
|
||
|
|
],
|
||
|
|
"under_test": "tool_hunter unchanged (default prompt/tools/4 steps), deepseek-flash, runner 6bfb05f",
|
||
|
|
"cost_usd": 8.8776,
|
||
|
|
"scope_in_reach": {
|
||
|
|
"cases_where_the_vulnerable_file_was_among_the_hotspots": 1,
|
||
|
|
"of": 17,
|
||
|
|
"detected_when_in_reach": "1/1 (wp-gopay-log-filter-sqli)"
|
||
|
|
},
|
||
|
|
"instrument_failures": {
|
||
|
|
"fuxa-tdengine-escape-sqli": "all six pins: every hunt rejected with DeepSeek HTTP 400 (undiagnosed); 0 regions offered the family",
|
||
|
|
"wp-directorist-avatar-ssrf": "three pins: every hunt HTTP 400; 0 regions offered the family"
|
||
|
|
},
|
||
|
|
"gates": {
|
||
|
|
"precision>=0.95": "not met",
|
||
|
|
"recall>=0.90": "not met",
|
||
|
|
"fixed_alerts==0": "not met (1)",
|
||
|
|
"benign_alerts==0": "not met (16)"
|
||
|
|
}
|
||
|
|
}
|