7.5

CVE-2023-22580

Sequalize - Bad query filtering leading to SQL errors

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sequelizejs ≫ Sequelize SwPlatform node.js Version < 6.28.1
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha1 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha10 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha11 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha12 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha13 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha14 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha15 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha16 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha17 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha18 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha19 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha2 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha2.1 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha2.2 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha3 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha4 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha5 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha6 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha7 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha8 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update alpha9 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update oc_test_1 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update oc_test_2 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update oc_test_3 SwPlatform node.js
Sequelizejs ≫ Sequelize Version 7.0.0 Update oc_test_4 SwPlatform node.js
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.58% 0.432
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
csirt@divd.nl 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://csirt.divd.nl/DIVD-2022-00020/
Third Party Advisory
https://csirt.divd.nl/CVE-2023-22580
Third Party Advisory