DB Parameter Tampering Issue in ASP.net core web API project

Forums Open Source Security
#1

Hi,

I have called one of the SP from .Net code and pass two input parameter and getting rowAffected count at that time getting this issue DB Parameter tampering checkmarx Issue,

using (SqlConnection con = new SqlConnection(this.dBContext.DefaultConnection))
{
using (SqlCommand cmd = new SqlCommand(“CustomersRecords”, con))
{
cmd.CommandType = CommandType.StoredProcedure;
cmd.Parameters.AddWithValue("@Cust_request_guid",Customer.Cust_request_guid);
cmd.Parameters.AddWithValue("@response_json", Customer.responseJSON);

                    //Execute
                    con.Open();
                    int rowsAffected = cmd.ExecuteNonQuery();

Kindly help me to fix it.