AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-3754

HIGH · CVSS 8.8 EPSS 1.20%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-07-03 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2018-3754
Severity
HIGH
CVSS
8.8
EPSS
1.20%

Original NVD Description

Node.js third-party module query-mysql versions 0.0.0, 0.0.1, and 0.0.2 are vulnerable to an SQL injection vulnerability due to lack of user input sanitization. This may allow an attacker to run arbitrary SQL queries when fetching data from database.