| Detector: | Findbugs |
| Target: | project ' odata4j ' version0.6 |
| Tags: |
Anomaly identified by the detector. Please review whether this anomaly corresponds to a misuse.
| Finding: | finding-1 |
| In File: | org/odata4j/producer/jpa/ExecuteCountQueryCommand.java |
| In Method: | execute(JPAContext) |
| Code with Finding: |
|
| Hit | Rank | Desc | Type | Violations |
|---|---|---|---|---|
| Yes |
1 |
SECSQLIJPA: This use of javax/persistence/EntityManager.createQuery(Ljava/lang/String;)Ljavax/persistence/Query; can be vulnerable to SQL/JPQL injection |
SQL_INJECTION_JPA |
| Reviewer Name: | anna |
| : |
https://en.wikibooks.org/wiki/Java_Persistence/Auditing_and_Security stores persistence information - no guarantee that the input is sanitized. |