CVE-2015-9244

Description (CNA)

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.

Affected (CNA)

CWE

CWE-89

References

• https://github.com/felixge/node-mysql/issues/342
• https://nodesecurity.io/advisories/66

ADP enrichment