AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-2422

CRITICAL · CVSS 10 EPSS 0.73%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-10-26 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 10.0. It involves a SQL injection risk.

CVE
CVE-2022-2422
Severity
CRITICAL
CVSS
10
EPSS
0.73%

Original NVD Description

Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-29793 CRITICAL CVE-2026-29792 CRITICAL CVE-2026-27193 MEDIUM CVE-2026-27192 HIGH CVE-2026-27191 MEDIUM CVE-2023-37899 HIGH