dynatrace-oss/unguard

Benign user simulator is abusing SQL injections

Closed this issue · 0 comments

W3D3 commented

The benign user-simulator is executing SQL injections on the profile-service because the example data contains single quotes.
See https://github.com/dynatrace-oss/unguard/blob/main/src/user-simulator/data/biolist.json

As this should be the benign user simulator, the quotes should be removed so that no vulnerabilities are abused when running it.