SSporea887078 (Community Member) asked a question.
Hi all,
Can anyone explain how the use of FirstOrDefault() in LInq (c#) triggers CWE-566: Authorization Bypass Through User-Controlled SQL Primary Key flaw? This is just selecting TOP 1 in the SQL query or nothing if no value in the dataset returned.
Can anyone explain how the use of FirstOrDefault() in LInq (c#) triggers CWE-566: Authorization Bypass Through User-Controlled SQL Primary Key flaw? This is just selecting TOP 1 in the SQL query or nothing if no value in the dataset returned.
The flaw started to show recently in the scans, where we use FirstOrDefault() for years now.
Thank you
.png){kind=logo}
Hi @SSporea887078 (Community Member) ,
Thank you for reaching out and working with me through Veracode Support.
As soon as I have more information from Veracode Engineering I will update this post too.
Thank you,
Boy Baukema