LINQ Provider SQL Injection: Unescaped Tenant ID in DeleteAllForTenant

Vulnerability Summary Vulnerability Overview Type: SQL Injection Location: Unescaped string literals ( ) within the LINQ provider Root Cause: Several code paths directly concatenate runtime values, potentially under attacker control, into the generated SQL. Examples include: - : Embeds the key value as a literal in the SQL - : Embeds the key value as a literal in the SQL - : Projects a constant string into - : Embeds the tenant ID as a literal in the statement - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenant ID as a parameter to - : Passes the tenan

Goal Reached Thanks to every supporter — we hit 100%!

LINQ Provider SQL Injection: Unescaped Tenant ID in DeleteAllForTenant

More from this source