Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2022-2422

Feathers - SQL injection via attribute aliases

Description

Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Feather js Feathers-Sequalize

  • 6.x to < 6.3.4affected

References