Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

sqlmapproject/sqlmap

              master @ b66840e
            

Fixes

CVEs

CRITICAL

Peak severity

80.0%

Coverage

Highlights

Information Disclosure: 2 prior fixes. Scrutinize any change in this area.

extra/socks/socks.py: most-fixed (1 issue). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Insecure Deserialization: Unsafe deserialization using standard pickle mechanisms allows remote code execution if untrusted data is processed; restrictions on builtins are required to prevent arbitrary class instantiation.

Auth Bypass: Exposing the REST-JSON API server endpoint without mandatory authentication allows remote attackers to fully control the sqlmap API and initiate unauthorized scanning tasks.

Path Traversal: The file download endpoint of the API was vulnerable to path traversal on Windows platforms when directory traversal sequences bypassed simple checks due to unresolved absolute paths.