Description (CNA)
logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/diogosouza/logrocket-oauth2-example
- https://archive.ph/PecmD
- https://blog.logrocket.com/implement-oauth-2-0-node-js/
- https://archive.ph/VlGDa
- https://github.com/secoats/cve/tree/master/CVE-2022-38488_sqli_logrocket-oauth2-example
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.