cve-2023-25813

このリポジトリには README がありません。...

CVE-2023-25813-TEST

Application de test CVE Ceci est une application d'exercice Express + MySQL pour vérifier localement le fonctionnement de la CVE-2023-25813 de Sequelize. Ce projet conserve intentionnellement une version vulnérable de Sequelize et un modèle de requête de connexion vulnérable. Ne l'exposez pas sur...

CVE-2023-25813

Ce depot n’a pas de fichier README...

Exploit for SQL Injection in Sequelizejs Sequelize

CVE-2023-25813 CVE 정보 - CVE 번호: CVE-2023-25813https...

@24hr/content-next (>=1.0.0, <=2.1.17-alpha), @24hr/natswrapper (>=1.0.0, <=1.0.20) +205 more potentially affected by CVE-2023-25813 via sequelize (>=6.0.0-beta.4, <=6.19.0)

sequelize NPM version =6.0.0-beta.4, =1.0.0, =1.0.0, =0.1.0, =0.8.0, =1.0.43, =0.13.0, =13.0.7-feature-244b53-kvkvw2nk, =1.0.63, =0.1.3-alpha.0, =0.1.3-alpha.0, =0.1.0-alpha.0, =0.1.1-alpha.0, =0.3.0 and more Source cves: CVE-2023-25813 Source advisory: OSV:GHSA-WRH9-CJV3-2HPW...

CVE-2023-25813

Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through replacements are not properly escaped which can lead to arbitrary SQL injection depending on the specific queries in use. The issue has been fix...

CVE-2023-25813 SQL Injection via replacements in sequelize

Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through replacements are not properly escaped which can lead to arbitrary SQL injection depending on the specific queries in use. The issue has been fix...