-
Type:
Bug
-
Status:
Closed
-
Priority:
Medium
-
Resolution:
Done
-
Affects Version/s:
None
-
Fix Version/s:
None
-
-
-
-
-
Item State:
Production Complete
- Closed
-
Issue Importance:
Good To Have
Getting Server error: Admin User page
1]add User ID:Single quote:
2]Click on save button
3]Getting Server error
Refer attached screen shots:
below is error Log:
ErrorID : 0
ErrorSource : ControllerAppTier.GetData->WORKTERRAControllerAppTier.GetData->AdminUser.GetData->AdminUser.GetAdminUserForGivenName->CommonBusinessRoutines.GetSingleValue
ErrorMessage: Incorrect syntax near 'Donald'.
Unclosed quotation mark after the character string ' AND Users.SystemUserID = SystemUsers.ID '.
StackTrace: at WORKTERRA.Shared.WORKTERRAControllerAppTier.GetData(WORKTERRAControllerWebTierEntity objWORKTERRAControllerWebTierEntity)
at WORKTERRA.ControllerAppTier.GetData(Int32 intProjectsId, String strInput)
TargetSite: System.String GetData(WORKTERRA.Shared.WORKTERRAControllerWebTierEntity)
{"report":{"apdex":1,"isInitial":true,"journeyId":"c48124ca-2c10-490e-8d53-9e575aecbfa4","key":"jira.project.issue.view-issue","navigationType":0,"readyForUser":813.1999999284744,"redirectCount":0,"resourceLoadedEnd":954.8999999761581,"resourceLoadedStart":179.39999997615814,"resourceTiming":[{"duration":236.10000002384186,"initiatorType":"link","name":"https://jira.workterra.net/s/3003653444a1e1a85555cab7dcfb3a21-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/css/_super/batch.css","startTime":179.39999997615814,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":179.39999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":415.5,"responseStart":0,"secureConnectionStart":0},{"duration":235.89999997615814,"initiatorType":"link","name":"https://jira.workterra.net/s/dd6a0911920485696ac20493290df627-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/css/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&richediton=true","startTime":179.69999992847443,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":179.69999992847443,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":415.59999990463257,"responseStart":0,"secureConnectionStart":0},{"duration":235.79999995231628,"initiatorType":"link","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.css","startTime":179.79999995231628,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":179.79999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":415.59999990463257,"responseStart":0,"secureConnectionStart":0},{"duration":235.69999992847443,"initiatorType":"link","name":"https://jira.workterra.net/s/bd548f27bbf8f278bd83b60dd3284ed8-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static-adgs/jira.webresources:global-static-adgs.css","startTime":179.89999997615814,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":179.89999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":415.59999990463257,"responseStart":0,"secureConnectionStart":0},{"duration":235.89999997615814,"initiatorType":"link","name":"https://jira.workterra.net/s/70725731a158a7140f19ddbd4201ba27-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static/jira.webresources:global-static.css","startTime":180,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":180,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":415.89999997615814,"responseStart":0,"secureConnectionStart":0},{"duration":248.19999992847443,"initiatorType":"script","name":"https://jira.workterra.net/s/f2623af22c15df767ec6ff268ae0b8bd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/js/_super/batch.js?locale=en-US","startTime":180,"connectEnd":180,"connectStart":180,"domainLookupEnd":180,"domainLookupStart":180,"fetchStart":180,"redirectEnd":0,"redirectStart":0,"requestStart":180,"responseEnd":428.1999999284744,"responseStart":428.1999999284744,"secureConnectionStart":180},{"duration":277.39999997615814,"initiatorType":"script","name":"https://jira.workterra.net/s/6ce676f2a5bcc9651cef6e7956f05def-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/js/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":180.19999992847443,"connectEnd":180.19999992847443,"connectStart":180.19999992847443,"domainLookupEnd":180.19999992847443,"domainLookupStart":180.19999992847443,"fetchStart":180.19999992847443,"redirectEnd":0,"redirectStart":0,"requestStart":180.19999992847443,"responseEnd":457.59999990463257,"responseStart":457.59999990463257,"secureConnectionStart":180.19999992847443},{"duration":280.2000000476837,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/4.1.5/_/download/resources/com.atlassian.plugins.atlassian-chaperone:hotspot-tour/hotspot-tour.js?batch=false&locale=en-US","startTime":180.29999995231628,"connectEnd":180.29999995231628,"connectStart":180.29999995231628,"domainLookupEnd":180.29999995231628,"domainLookupStart":180.29999995231628,"fetchStart":180.29999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":180.29999995231628,"responseEnd":460.5,"responseStart":460.5,"secureConnectionStart":180.29999995231628},{"duration":280.5,"initiatorType":"script","name":"https://jira.workterra.net/s/6aa3fcf1fac5fd551eee0b69077524e6-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/aae1242f5fc81cc6a5bb8bc963ccda29/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US","startTime":180.39999997615814,"connectEnd":180.39999997615814,"connectStart":180.39999997615814,"domainLookupEnd":180.39999997615814,"domainLookupStart":180.39999997615814,"fetchStart":180.39999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":180.39999997615814,"responseEnd":460.89999997615814,"responseStart":460.89999997615814,"secureConnectionStart":180.39999997615814},{"duration":280.60000002384186,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":180.59999990463257,"connectEnd":180.59999990463257,"connectStart":180.59999990463257,"domainLookupEnd":180.59999990463257,"domainLookupStart":180.59999990463257,"fetchStart":180.59999990463257,"redirectEnd":0,"redirectStart":0,"requestStart":180.59999990463257,"responseEnd":461.1999999284744,"responseStart":461.1999999284744,"secureConnectionStart":180.59999990463257},{"duration":280.7000000476837,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":180.69999992847443,"connectEnd":180.69999992847443,"connectStart":180.69999992847443,"domainLookupEnd":180.69999992847443,"domainLookupStart":180.69999992847443,"fetchStart":180.69999992847443,"redirectEnd":0,"redirectStart":0,"requestStart":180.69999992847443,"responseEnd":461.39999997615814,"responseStart":461.39999997615814,"secureConnectionStart":180.69999992847443},{"duration":281,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.js?locale=en-US","startTime":180.69999992847443,"connectEnd":180.69999992847443,"connectStart":180.69999992847443,"domainLookupEnd":180.69999992847443,"domainLookupStart":180.69999992847443,"fetchStart":180.69999992847443,"redirectEnd":0,"redirectStart":0,"requestStart":180.69999992847443,"responseEnd":461.6999999284744,"responseStart":461.6999999284744,"secureConnectionStart":180.69999992847443},{"duration":281.1999999284744,"initiatorType":"link","name":"https://jira.workterra.net/s/05c862146699bb029ceb0a489075e63b-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/bcd66e9a133a1b9f5fd14b56841e1c5b/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":180.89999997615814,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":180.89999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":462.09999990463257,"responseStart":0,"secureConnectionStart":0},{"duration":281.1999999284744,"initiatorType":"script","name":"https://jira.workterra.net/rest/api/1.0/shortcuts/805012/344f6dde0e779bc821c159302c8a4389/shortcuts.js?context=issuenavigation&context=issueaction","startTime":180.89999997615814,"connectEnd":180.89999997615814,"connectStart":180.89999997615814,"domainLookupEnd":180.89999997615814,"domainLookupStart":180.89999997615814,"fetchStart":180.89999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":180.89999997615814,"responseEnd":462.09999990463257,"responseStart":462.09999990463257,"secureConnectionStart":180.89999997615814},{"duration":281.40000009536743,"initiatorType":"link","name":"https://jira.workterra.net/s/9095228fa10daa2d3e3d7d5760c95e91-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.css?jira.create.linked.issue=true&richediton=true","startTime":181.09999990463257,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":181.09999990463257,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":462.5,"responseStart":0,"secureConnectionStart":0},{"duration":281.5,"initiatorType":"script","name":"https://jira.workterra.net/s/c19a1b46e985d7fb85efaf27c8febfdd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.js?jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":181.19999992847443,"connectEnd":181.19999992847443,"connectStart":181.19999992847443,"domainLookupEnd":181.19999992847443,"domainLookupStart":181.19999992847443,"fetchStart":181.19999992847443,"redirectEnd":0,"redirectStart":0,"requestStart":181.19999992847443,"responseEnd":462.6999999284744,"responseStart":462.6999999284744,"secureConnectionStart":181.19999992847443},{"duration":432,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":181.69999992847443,"connectEnd":181.69999992847443,"connectStart":181.69999992847443,"domainLookupEnd":181.69999992847443,"domainLookupStart":181.69999992847443,"fetchStart":181.69999992847443,"redirectEnd":0,"redirectStart":0,"requestStart":181.69999992847443,"responseEnd":613.6999999284744,"responseStart":613.6999999284744,"secureConnectionStart":181.69999992847443}],"threshold":1000,"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":39,"responseStart":174,"responseEnd":175,"domLoading":177,"domInteractive":997,"domContentLoadedEventStart":997,"domContentLoadedEventEnd":1049,"domComplete":1514,"loadEventStart":1514,"loadEventEnd":1516,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[],"measures":[],"correlationId":"fed148ca86e3ce","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":110,"dbReadsTimeInMs":21,"dbConnsTimeInMs":24,"applicationHash":"156decd7d2b4272533aa6cefc8294af635e1da97","experiments":[]}}
Khandu Kshirsagar (Inactive)
made changes -
Hi Rashmita Dudhe,
When we enter single quote in username, while checking if that user already exists in system or not, it was throwing an error during query execution.
We have fixed this issue. Code has been checked in into LB.
Prasad Pise,
Can we try sql injection on this username input of Partner/Broker page and Admin page?
Thanks.
CC: Samir, Vijay Siddha, Rakesh Roy, Satya