Security & Privacy

Call to SQLite query API

Risk: info

Description

Improper SQL query construction could lead to SQL injection. An SQL injection attack consists of injecting of an SQL query via the input data from the client to the application

Recommendation

This entry is informative, no recommendations applicable.

Detect this with Ostorlab

Ostorlab checks Android and iOS apps for this issue.

Scan your app free

Links

• SQL Injection (OWASP)
• Security Tips (Android developer)
• CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Standards

• CWE_TOP_25:
  • CWE_89
• OWASP_MASVS_L1:
  • MSTG_STORAGE_1
• OWASP_MASVS_L2:
  • MSTG_STORAGE_1
• OWASP_MOBILE_TOP_10:
  • M9_2024