Description
Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.
Remediation
References
https://csirt.divd.nl/CVE-2022-2422
https://csirt.divd.nl/DIVD-2022-00020
Related Vulnerabilities
CVE-2022-38179 Vulnerability in maven package io.ktor:ktor-utils
CVE-2017-16213 Vulnerability in npm package mfrserver
CVE-2022-39299 Vulnerability in npm package node-saml
CVE-2021-44878 Vulnerability in maven package org.pac4j:pac4j-core
CVE-2018-3721 Vulnerability in npm package lodash._basemerge