CVE-2022-2422
Feathers - SQL injection via attribute aliases
概要
Feathers - SQL injection via attribute aliases
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory csirt.divd.nl
- advisory csirt.divd.nl
- advisory github.com
- advisory nvd.nist.gov