Collected research
Cypher Query Injection: The New “SQL Injection” We Aren't Aware Of
Explains Cypher injection in graph databases, including blind extraction, chained LOAD CSV requests that send internal response data to an external endpoint, and APOC procedures. The slides cover Neo4j and RedisGraph behavior and recommend parameterized queries and restricted privileges.
Record
- Researcher
- Noy Pearl
- Published by
- MoonActive
- Format
- Recording
- Topic
- Injection
In the archive
Related sources
- Cypher Query Injection: The New SQL Injection We Are Not Aware Of (Slides) Whitepaper
- Cypher Injection Playground Repository
- Research Postman collections
Tags
This page is the archive's own catalogue record. The research is the work of Noy Pearl, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .