A critical SQL injection vulnerability in the drogon framework allows unauthenticated remote attackers to compromise database integrity and confidentiality.

This is a SQL injection flaw located in the makeCriteria function within orm_lib/src/Criteria.cc. The vulnerability arises from improper sanitization of the filter argument, which can be manipulated by an unauthenticated remote attacker to inject malicious SQL queries.

Successful exploitation of this vulnerability permits unauthorized access to the underlying database, potentially leading to data exfiltration, modification, or deletion. Given the CVSS score of 7.3, this flaw poses a significant risk to the confidentiality and integrity of applications relying on the drogon ORM, which could result in severe reputational damage and compliance failures.

Immediate Action: Since no official patch is currently available, users should restrict access to applications using the affected ORM component or implement strict input validation on all filter parameters to block malicious SQL syntax.

Proactive Monitoring: Security teams should monitor database logs for unusual query patterns, such as unexpected UNION statements or syntax errors, which may indicate active injection attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets designed to detect and block common SQL injection patterns targeting the application endpoints.

Public Exploit Available: Yes, a published proof-of-concept exists and is attributed to the security researcher's write-up provided in the referenced GitHub Gist.

Organizations utilizing the drogon framework must treat this vulnerability with high priority. Given the absence of an official vendor patch, developers should manually review their implementation of the makeCriteria function and apply robust input sanitization as a temporary defensive measure until an official update is released.