FOLLOW FLUID ATTACKS
The system generates Apache Lucene queries dynamically, without validating untrusted inputs and without using parameterized statements or stored procedures.
R169. Use parameterized queries
R173. Discard unsafe inputs
Copyright © 2021 Fluid Attacks, We hack your software. All rights reserved.