CVE-2022-29822

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-29822
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29822.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-29822
Aliases
Published
2022-10-25T00:00:00Z
Modified
2026-07-15T01:49:03.648248713Z
Severity
  • 10.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
Feathers - Improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection
Details

Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29822.json",
    "cna_assigner": "DIVD",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "6.x"
                },
                {
                    "fixed": "6.3.4"
                }
            ]
        }
    ],
    "cwe_ids": [
        "CWE-89"
    ]
}
References

Affected packages

Git / github.com/feathersjs-ecosystem/feathers-sequelize

Affected ranges

Type
GIT
Repo
https://github.com/feathersjs-ecosystem/feathers-sequelize
Events
Introduced
51d4360d66851596a71d7d274c4135d025ee170b
Fixed
0f2edef8593f5e81195d47f89931f147a96664e7
Database specific 
{
    "cpe": "cpe:2.3:a:feathersjs:feathers-sequelize:*:*:*:*:*:node.js:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "6.0.0"
        },
        {
            "fixed": "6.3.4"
        }
    ]
}

Affected versions

v6.*
v6.0.0
v6.0.1
v6.0.2
v6.1.0
v6.2.0
v6.3.0
v6.3.1
v6.3.2
v6.3.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29822.json"