Feathers Sequalize
by Feather Js
Source repositories
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-2422 | Cri | 0.58 | 10.0 | 0.01 | Oct 26, 2022 | Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used. | ||
| CVE-2022-29823 | Cri | 0.58 | 10.0 | 0.01 | Oct 26, 2022 | Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application. | ||
| CVE-2022-29822 | Cri | 0.58 | 10.0 | 0.01 | Oct 26, 2022 | Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection |
- risk 0.58cvss 10.0epss 0.01
Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.
- risk 0.58cvss 10.0epss 0.01
Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application.
- risk 0.58cvss 10.0epss 0.01
Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection