Description
Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.
Remediation
References
https://csirt.divd.nl/CVE-2022-2422
https://csirt.divd.nl/DIVD-2022-00020
Related Vulnerabilities
CVE-2019-9212 Vulnerability in maven package com.alipay.sofa:hessian
CVE-2015-0254 Vulnerability in maven package taglibs:standard
CVE-2023-37903 Vulnerability in npm package vm2
CVE-2016-4430 Vulnerability in maven package org.apache.struts:struts2-core
CVE-2020-14966 Vulnerability in maven package org.webjars.bowergithub.kjur:jsrsasign