Sql injection vulnerability

GGuinea / multi-tenancy-go

Mulitenant database architecture with asynchronous migrations

1 stars 0 forks source link

Sql injection vulnerability #1

Open meblum opened 7 months ago

meblum commented 7 months ago

There’s a risk of arbitrary sql execution here https://github.com/GGuinea/multi-tenancy-go/blob/732ff6df26560ab57136c1cdace090a28ac66afd/internal/pkg/db-migrations/migrations.go#L57

GGuinea commented 7 months ago

Thank you @meblum for your attention!

Yeah definitely this code should not be used in production without validation. But please keep in mind that this code possibly has more vulnerabilities since I've created this code only for blog purpose about multitenancy things.