Home / Compliance / Corrective Action Plans / CAP-001
CAP-001 — Remediate SQL injection in portal search
Details
Name
Remediate SQL injection in portal search
CAP Status
In Progress
Initiated From
Priority
Critical
Owner
YKYousef Karim
Reviewer
SNSara Nasser
Target Date
November 30, 2026
Deadline Status
On Track
Approval Required
No
Description
Replace dynamic SQL in search with parameterized queries.
Root Cause Analysis
Legacy query builder bypassed ORM.
Linked Controls and Vulnerabilities
| Type | ID | Name | Context | Status | Owner | Date Mapped | |
|---|---|---|---|---|---|---|---|
| Vulnerability | SQL injection in portal search parameter | Assets: AST-001 | In Remediation | YKYousef Karim | September 5, 2026 |
Tasks
| ID | Name | Type | Created By | Task Owner | Start Date | Due Date | Status | Deadline Status |
|---|---|---|---|---|---|---|---|---|
| T-601 | Approve remediation plan | CAP Approval Task | OHOmar Haddad | SNSara Nasser | September 5, 2026 | September 8, 2026 | Completed | Closed |
| T-602 | Refactor search query to parameterized form | Corrective Action Task | OHOmar Haddad | YKYousef Karim | September 10, 2026 | November 20, 2026 | In Progress | On Time |
| T-603 | Add input validation tests | Corrective Action Task | OHOmar Haddad | MCMaya Chen | October 1, 2026 | November 5, 2026 | Open | Overdue |
Related To
CAP: CAP-001 Remediate SQL injection in portal search
Vulnerability: VUL-001 SQL injection in portal search parameter
Approval History
No Data Available