Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37734
HistoryNov 01, 2022 - 6:12 a.m.

SQL Injection

2022-11-0106:12:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
sql injection
feathers-sequelize
index.js
arbitrary queries
software

0.002 Low

EPSS

Percentile

55.3%

feathers-sequelize is vulnerable to sql injection attacks. The vulnerability exists in the_find function of index.js because the parameters are not properly filtered which allows an attacker to inject and execute arbitrary sql queries.

0.002 Low

EPSS

Percentile

55.3%

Related for VERACODE:37734