indico

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies.

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies.

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies.

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies.

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies.

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies.

A SQL injection vulnerability in `FilterEngine.create_sqla_query()` allows any authenticated Rucio user to execute arbitrary SQL against the backend database through the DID search endpoint (`GET /dids/<scope>/dids/searc…

### Summary A SQL injection vulnerability exists in Rucio versions 1.30.0 and later before 35.8.5, 38.5.5, 39.4.2, and 40.1.1, in `FilterEngine.create_postgres_query()`.