Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38535
HistoryDec 20, 2022 - 5:05 a.m.

SQL Injection

2022-12-2005:05:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
knex.js
sql injection
security issue
arbitrary queries
where clause

0.001 Low

EPSS

Percentile

50.9%

knex is vulnerable to SQL Injection attacks. A specifically crafted attack statement through Knex.js allows a malicious user to inject and execute arbitrary SQL queries on the target system, ignoring the WHERE clause of a SQL query.

0.001 Low

EPSS

Percentile

50.9%

Related for VERACODE:38535