loopback-connector-oracle is Loopback Oracle Connector.
Affected versions of the package are vulnerable to SQL injection attacks. User-supplied inputs are not properly sanitized before using it in SQL queries. This may allow a remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.
loopback-connector-oracle to version 1.5.0 or higher.
- Raymond Feng
- Snyk ID
- 07 Jan, 2015
- 04 Jan, 2017