- Analyzer
- dast
- Category
- Injection
- Default severity
- Not encoded
- CWE
- Not encoded
- Execution
- Active
- Authentication
- Not required
- Applicability
- url
- Availability
- stable
What it detects
Probe responses that indicate SQL, command, or header injection behavior.
Evidence
The probe class and response change that supported the observation.
Remediation
Use typed APIs and parameter binding, validate inputs, and avoid command or query construction from untrusted data.
Limitations
This check is limited to the applicability and evidence delivered by dast. Review the evidence in context; a match is a finding input, while confidence and policy determine its disposition.
Related reference
Analyzer Registry · Findings and release decisions · Policy and confidence · Active testing
Remediation guidance: Remediation and fix verification · Baselines and suppressions