Unverified50% confidenceFactExact time
If a SCIM path parser uses regular expressions or string concatenation to map paths to database queries, LDAP filters or shell commands, attackers can inject special characters to break out of the intended scope, modify attributes that should not be touched, and even trigger command execution.
1
Sources
50%
Confidence
Long-term
Relevance
10/13/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe checker's path extraction relies solely on `+++ b/` file header lines in the diff to identify modified paths, supporting prefix matching.64% similarUnverified接口ID、参数名、URL路径这类高度结构化且唯一性强的字段是模型幻觉问题的高发区域61% similarUnverified软边界实现依赖入库阶段通过metadata元数据打标签，以及查询阶段引入用户画像机制动态生成过滤条件60% similarUnverifiedCommon implementations of tiered routing include rule-based length/perplexity thresholds, using small classifiers to predict query complexity scores, and cascade routing (where a weak model attempts first and then decides whether to escalate).60% similarUnverifiedThe intent router classifies user requests into one of four execution paths: vector_search, entity_lookup, path_synthesis, or general.59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1019880API
curl https://kongchang.com/api/v1/knowledge/claims/1019880MCP
get_claim(id=1019880)