← Back to browse · API

CVE-2022-2422

Severity
CRITICAL
CVSS
10.0
EPSS
0.00763
Risk score
40.27
CISA KEV
No
PoC
No
Published
2022-10-25
Modified
2025-03-11
First seen
2026-08-07
Aliases
EUVD-2022-7154, GHSA-QPV8-4PJQ-QQH7
Products
Feather js:Feathers-Sequalize 6.x <6.3.4
Sources
euvd EUVD-2022-7154

Description

Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.

References