Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: hackerone
Published: 2018-05-29T20:00:00Z
Updated: 2024-09-16T16:48:28.663Z
Reserved: 2017-10-29T00:00:00
Link: CVE-2015-9244
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2018-05-29T20:29:00.597
Modified: 2021-05-18T19:20:18.937
Link: CVE-2015-9244
Redhat
No data.