CVE-2015-9244

Published May 29th, 2018

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.

A pure node.js JavaScript Client implementing the MySQL protocol.

GitHub

18.6K