Description (CNA)
Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Feather js / Feathers-Sequalize | affected 6.x before 6.3.4 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.