CVE-2023-22578

2023-02-1615:15:18

Google

osv.dev

cve-2023-22578

attribute filtering

sequelize js

sql injection

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.7%

JSON

Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.

CPENameOperatorVersion
sequelizeeq1.3.1
sequelizeeq5.0.0-beta.7
sequelizeeq4.13.14
sequelizeeq6.14.0
sequelizeeq6.3.4
sequelizeeq3.4.1
sequelizeeq6.12.0-beta.1
sequelizeeq1.5.0-beta
sequelizeeq5.0.0-beta.13
sequelizeeq6.12.0-beta.2

Name	Operator	Version
sequelize	eq	1.3.1
sequelize	eq	5.0.0-beta.7
sequelize	eq	4.13.14
sequelize	eq	6.14.0
sequelize	eq	6.3.4
sequelize	eq	3.4.1
sequelize	eq	6.12.0-beta.1
sequelize	eq	1.5.0-beta
sequelize	eq	5.0.0-beta.13
sequelize	eq	6.12.0-beta.2