ascanrules: SQLi SQLite rename scan rule (all time based)

[kingthorin]

Overview

The SQL Injection SQLite scan rule has been renamed to indicate that it currently only does time based tests (Issue 7341).

The union test code that it previously contained but wasn't using has been removed. If it is re-implemented sometime in the future that rule should use rule ID 90038.

Related Issues

• Break out Blind/Timing Based Injections To Separate Rules zaproxy#7341
• Move time based attacks to their own scan rules #4316
• ascanrules: feat: Add specialized Blind SQL Injection Scanner #6543

[psiinon]

Checkmarx One – Scan Summary & Details – 48a070dc-9ec7-4dc8-a0b8-08c880ed2246

New Issues (4)

Checkmarx found the following issues in this Pull Request

Severity	Issue	Source File / Package	Checkmarx Insight
	CVE-2025-53864	Maven-com.google.code.gson:gson-2.8.5	details Description: Connect2id Nimbus JOSE + JWT allows a remote attacker to cause a Denial-of-Service (DoS) via a deeply nested JSON object supplied in a JWT claim se... Attack Vector: NETWORK Attack Complexity: LOW ID: adVK7zSuCsxIRtahouzaRyMLFuH%2FCFX1%2Bv1vm1sbrbw%3D Vulnerable Package
	CVE-2025-53864	Maven-com.google.code.gson:gson-2.3.1	details Description: Connect2id Nimbus JOSE + JWT allows a remote attacker to cause a Denial-of-Service (DoS) via a deeply nested JSON object supplied in a JWT claim se... Attack Vector: NETWORK Attack Complexity: LOW Exploitable Path: [email protected]/JsonPayloadGenerator.java - ... - [email protected]/gson/stream/JsonReader.java ID: H2aqxaR1aaTZVxokUmAa%2FzfVxqasZq%2BhEjvqHRiPirg%3D Vulnerable Package
	CVE-2025-53864	Maven-com.google.code.gson:gson-2.10.1	details Recommended version: 2.12.0 Description: Connect2id Nimbus JOSE + JWT allows a remote attacker to cause a Denial-of-Service (DoS) via a deeply nested JSON object supplied in a JWT claim se... Attack Vector: NETWORK Attack Complexity: LOW Exploitable Path: [email protected]/JsonPayloadGenerator.java - ... - [email protected]/gson/stream/JsonReader.java ID: qoQAYl0KYqKEYGUpigip%2Fwiol3Jqe%2BYZlOMVd2fuS7o%3D Vulnerable Package
	CVE-2025-53864	Maven-com.google.code.gson:gson-2.11.0	details Recommended version: 2.12.0 Description: Connect2id Nimbus JOSE + JWT allows a remote attacker to cause a Denial-of-Service (DoS) via a deeply nested JSON object supplied in a JWT claim se... Attack Vector: NETWORK Attack Complexity: LOW Exploitable Path: [email protected]/JsonPayloadGenerator.java - ... - [email protected]/gson/stream/JsonReader.java ID: v%2BrbtPy5JGlv8%2Bn6%2BXzCZsp%2BrNr9AfYx7lPwyk7QjEA%3D Vulnerable Package

[thc202]

Thank you!