https://flatt.tech/research/tags/mysql/ Recent content in MySQL on GMO Flatt Security Research Hugo en Tue, 22 Feb 2022 00:00:00 +0000 https://flatt.tech/research/posts/finding-an-unseen-sql-injection-by-bypassing-escape-functions-in-mysqljs-mysql/ Tue, 22 Feb 2022 00:00:00 +0000 https://flatt.tech/research/posts/finding-an-unseen-sql-injection-by-bypassing-escape-functions-in-mysqljs-mysql/ <h2 id="tldr">TL;DR</h2> <p>It was found that unexpected behaviors in the query’s escape function could cause a SQL injection in <code>mysqljs/mysql</code> (<a href="https://github.com/mysqljs/mysql" target="_blank" rel="noopener">https://github.com/mysqljs/mysql</a> ), which is one of the most popular MySQL packages in the Node.js ecosystem.</p> <p>Typically, query escape functions or placeholders are known to prevent SQL injections. However, <code>mysqljs/mysql</code> is known to have different escape methods over different value types, and it could eventually cause unexpected behaviors when the attacker passes the parameter with a different value type. Unexpected behaviors include buggy behaviors and SQL injections.</p>