PKrystian Full-Stack-Bank SQL Injection Vulnerability in User Handler Component

A SQL injection vulnerability has been identified in PKrystian Full-Stack-Bank versions prior to bf73a0179e3ff07c0d7dc35297cea0be0e5b1317. The issue arises in the User Handler component, where improper handling of user input allows for SQL injection attacks. This vulnerability can be exploited remotely and requires authentication.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can manipulate SQL queries to the database. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.

Remediation

Users are advised to update to the latest version of PKrystian Full-Stack-Bank, where this vulnerability has been addressed. The patch is available on the project's GitHub repository.