CVE-2022-2422
Feathers - SQL injection via attribute aliases
Résumé
Feathers - SQL injection via attribute aliases
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory csirt.divd.nl
- advisory csirt.divd.nl
- advisory github.com
- advisory nvd.nist.gov