CVE-2022-29823

🗓️ 25 Oct 2022 00:00:00Reported by DIVDType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 97 Views

Feather-Sequalize cleanQuery method insecure recursive logi

Reporter	Title	Published	Views	Family All 15
attackerkb	CVE-2022-29823	25 Oct 202222:00	–	attackerkb
CNNVD	Feathers 安全漏洞	26 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-29823 Feathers - Query “__proto__” is converted to real prototype	25 Oct 202200:00	–	cvelist
EUVD	EUVD-2022-7140	3 Oct 202520:07	–	euvd
Github Security Blog	Feather-Sequelize cleanQuery method vulnerable to Prototype Pollution	26 Oct 202212:00	–	github
Mend	CVE-2022-29823	25 Oct 202200:00	–	mend
NVD	CVE-2022-29823	26 Oct 202210:15	–	nvd
osv_ghsa	GHSA-P5M3-27VH-52J4 Feather-Sequelize cleanQuery method vulnerable to Prototype Pollution	26 Oct 202212:00	–	osv_ghsa
Prion	Remote code execution	26 Oct 202210:15	–	prion
Positive Technologies	PT-2022-19856 · Unknown · Feathers-Sequelize	25 Oct 202200:00	–	ptsecurity

NVD

Node

feathersjs feathers-sequelizeRange6.0.0–6.3.4node.js

[
  {
    "product": "Feathers-Sequalize",
    "vendor": "Feather js",
    "versions": [
      {
        "lessThan": "6.3.4",
        "status": "affected",
        "version": "6.x",
        "versionType": "custom"
      }
    ]
  }
]