Skip to content
Threat Feed
Subscribe

Product

MariaDB Connector/Node.js (>= 3.2.0, < 3.2.5, >= 3.3.0, < 3.3.4, >= 3.4.0, < 3.4.7, >= 3.5.0-Rc.0, < 3.5.4)

1 brief RSS
high advisory

SQL Injection in MariaDB Connector/Node.js

The MariaDB Connector/Node.js fails to properly escape input parameters for the text protocol when NO_BACKSLASH_ESCAPES mode is enabled, allowing attackers to perform SQL injection via standard placeholder APIs.

MariaDB Connector/Node.js +1 sql-injection nodejs database-security
2t 1c