CVE-2023-25813

Este repositorio no tiene un README...

cve-2023-25813

Este repositorio no tiene un README...

CVE-2023-25813-TEST

Aplicación de Prueba CVE Esta es una aplicación de práctica Express + MySQL para verificar el comportamiento de Sequelize CVE-2023-25813 localmente. Este proyecto mantiene intencionalmente una versión vulnerable de Sequelize y un patrón de consulta de inicio de sesión vulnerable. No lo exponga a...

Exploit for SQL Injection in Sequelizejs Sequelize

CVE-2023-25813 CVE 정보 - CVE 번호: CVE-2023-25813https...

CVE-2023-25813

creationtimestamp| type| source ---|---|--- 2023-02-23 00:52:08+00:00| seen| https://t.me/cibsecurity/58709...

@24hr/content-next (>=1.0.0, <=2.1.17-alpha), @24hr/natswrapper (>=1.0.0, <=1.0.20) +205 more potentially affected by CVE-2023-25813 via sequelize (>=6.0.0-beta.4, <=6.19.0)

sequelize NPM version =6.0.0-beta.4, =1.0.0, =1.0.0, =0.1.0, =0.8.0, =1.0.43, =0.13.0, =13.0.7-feature-244b53-kvkvw2nk, =1.0.63, =0.1.3-alpha.0, =0.1.3-alpha.0, =0.1.0-alpha.0, =0.1.1-alpha.0, =0.3.0 and more Source cves: CVE-2023-25813 Source advisory: OSV:GHSA-WRH9-CJV3-2HPW...

CVE-2023-25813

Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through replacements are not properly escaped which can lead to arbitrary SQL injection depending on the specific queries in use. The issue has been fix...

CVE-2023-25813 SQL Injection via replacements in sequelize

Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through replacements are not properly escaped which can lead to arbitrary SQL injection depending on the specific queries in use. The issue has been fix...