The software constructs all or part of an SQL command using externally-influenced input without properly neutralizing special elements that could modify the intended command.
CWE-89 (SQL Injection) is classified as critical severity and falls under the OWASP Top 10 category A03:2021.
The official CWE entry is maintained by MITRE at cwe.mitre.org/data/definitions/89.html.
Orbis AppSec automatically detects and fixes SQL Injection vulnerabilities in your code with AI-powered static analysis.