Description (CNA)
Knex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of a SQL query.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.ghostccamm.com/blog/knex_sqli/
- https://github.com/knex/knex/issues/1227
- https://nvd.nist.gov/vuln/detail/CVE-2016-20018
ADP enrichment
No English description supplied.