CyberRota Analysis
AI-GeneratedThe vulnerability exists in the '/ws/apitribuna/setVisita' endpoint, where the id_video and id_ambito parameters are susceptible to SQL injection due to inadequate input validation and sanitization. This flaw allows remote attackers to execute arbitrary SQL commands, potentially leading to database errors, manipulation of visit tracking records, and compromised integrity of analytics data. Organizations utilizing this endpoint should prioritize remediation to protect against unauthorized data access and ensure the reliability of their tracking systems.
Original NVD Description
The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the id_video and id_ambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of queries, causing database errors and potentially manipulating visit tracking records. Given the nature of the endpoint, this could also affect the integrity of analytics and the accuracy of records.