← CVE Intelligence

CVE-2022-29823

Feathers - Query “__proto__” is converted to real prototype PUBLISHED

Description (CNA)

Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application.

Affected (CNA)

Vendor / productVersions
Feather js / Feathers-Sequalizeaffected 6.x before 6.3.4

CWE

CWE-1321

References

ADP enrichment

CVE

No English description supplied.