c/cybersecurity · by kid@sh.itjust.works · 1y

Zabbix urges upgrades after SQL injection bug disclosure • The Register

https://go.theregister.com/feed/www.theregister.com/2024/11/29/zabbix_urges_upgrades_after_critical/

32 points · 3 comments · view on lemmy.world

3 Comments

redditReallySucks@lemmy.dbzer0.com · 11 pts · 1y (1 reply)

Am I just not informed enough about this topic or would using parameterized queries everywhere fix the problem? I can't understand how software companies still manage to make products vulnerable to SQL Injection

PlexSheep@infosec.pub · 3 pts · 1y

To my limited knowledge, yes that should fix things.

exu@feditown.com · 4 pts · 1y

Good to know. I'll have to check if my instance is one of the affected versions and probably also have to bring it up at work.