Duplicate advisory: Sequelize - Unsafe fall-through in getWhereConditions

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vqfx-gj96-3w95. This link is maintained to preserve external references. Original Description Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...

@galenjs/framework-next (>=1.0.0, <=1.7.0), @galenjs/models (>=1.1.11-alpha.0, <=1.7.0) +4 more potentially affected by CVE-2023-22580 via @sequelize/core (7.0.0-alpha.10)

@sequelize/core NPM version 7.0.0-alpha.10 is affected by a known vulnerability. The following packages have a transitive dependency on @sequelize/core and may be impacted: - @galenjs/framework-next =1.0.0, =1.1.11-alpha.0, =0.0.2, =0.0.2, =0.0.30, =0.1.0, =0.1.1 Source cves: CVE-2023-22580 Sourc...

@galenjs/framework-next (>=1.0.0, <=1.7.0), @galenjs/models (>=1.1.11-alpha.0, <=1.7.0) +4 more potentially affected by CVE-2023-22580 via @sequelize/core (7.0.0-alpha.10)

@sequelize/core NPM version 7.0.0-alpha.10 is affected by a known vulnerability. The following packages have a transitive dependency on @sequelize/core and may be impacted: - @galenjs/framework-next =1.0.0, =1.1.11-alpha.0, =0.0.2, =0.0.2, =0.0.30, =0.1.0, =0.1.1 Source cves: CVE-2023-22580 Sourc...

CVE-2023-22578

Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections...

CVE-2023-22580

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure...

CVE-2023-22579

Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...

Input validation

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure...

Sql injection

Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections...

CVE-2023-22579

CVE-2023-22579 concerns Sequelize (Node.js ORM). The related docs point to a type-confusion/unsafe fall-through in getWhereConditions that can bypass parameter filtering, enabling an attacker to execute arbitrary code under certain conditions. Affected component: Sequelize runtime; core issue is ...

CVE-2023-22579

Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...

CVE-2023-22579 Sequalize - Unsafe fall-through in getWhereConditions

Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...

CVE-2023-22578

CVE-2023-22578 affects the Sequelize JavaScript ORM. The issue is caused by improper attribute filtering, enabling a remote attacker to execute SQL injections via crafted queries that can view, add, modify, or delete data in the back-end database. Documented impacts in the IBM/Red Hat/OSS advisor...

CVE-2023-22578 Sequalize - Default support for “raw attributes” when using parentheses

Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections...

CVE-2023-22578

Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections...

@galenjs/framework-next (>=1.0.0, <=1.7.0), @galenjs/models (>=1.1.11-alpha.0, <=1.7.0) +4 more potentially affected by CVE-2023-22580 via @sequelize/core (7.0.0-alpha.10)

@sequelize/core NPM version 7.0.0-alpha.10 is affected by a known vulnerability. The following packages have a transitive dependency on @sequelize/core and may be impacted: - @galenjs/framework-next =1.0.0, =1.1.11-alpha.0, =0.0.2, =0.0.2, =0.0.30, =0.1.0, =0.1.1 Source cves: CVE-2023-22580 Sourc...

CVE-2023-22580

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure...

CVE-2023-22580 Sequalize - Bad query filtering leading to SQL errors

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure...

CVE-2023-22580

CVE-2023-22580 describes a vulnerability in the Sequelize JS library where improper input filtering can allow malicious queries to disclose sensitive information. The issue affects Sequelize (library/file level) and is associated with a confidentiality impact (per CVSS) without explicit exploit d...

CVE-2023-22579: Access of Resource Using Incompatible Type

Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...

CVE-2023-22580: Exposure of Sensitive Information to an Unauthorized Actor

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure...