← Back to browse · API

CVE-2022-29823

Severity
CRITICAL
CVSS
10.0
EPSS
0.01451
Risk score
40.51
CISA KEV
No
PoC
No
Published
2022-10-25
Modified
2025-03-11
First seen
2026-08-07
Aliases
EUVD-2022-7140, GHSA-P5M3-27VH-52J4
Products
Feather js:Feathers-Sequalize 6.x <6.3.4
Sources
euvd EUVD-2022-7140

Description

Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application.

References