A05:2025 — Injection
Verified by Precogs Threat Research
What is Injection (OWASP A05:2025)?
Application vulnerable to injection when user-supplied data is not validated, filtered, or sanitized. Includes SQL injection, NoSQL injection, OS command injection, LDAP injection, and cross-site scripting (XSS). AI-generated code is particularly susceptible to injection flaws.
Impact
Injection remains a critical threat. 94% of applications were tested for some form of injection. Enables data theft, data manipulation, denial of service, and full system compromise.
How Precogs AI Addresses A05
Precogs AI pre-LLM filters catch injection vulnerabilities in AI-generated code, while Binary DAST detects injection points in compiled web applications at runtime.