CVE-2023-25813-TEST

CVE Test App Sequelize CVE-2023-25813 の動作をローカルで確認するための Express + MySQL 実習アプリです。 このプロジェクトは意図的に脆弱な Sequelize バージョンと脆弱なログインクエリパターンを維持しています。インターネットに公開せず、ローカルの Docker 実習環境でのみ実行してください。 構成 Web: Express, EJS DB: MySQL 8.0 ORM: Sequelize 6.19.0 Docker DB ポート: localhost:3307 Web ポート: localhost:3000 主な機能:...

cve-2023-25813

このリポジトリには README がありません。...

CVE-2023-25813

此存储库没有 README。...

Exploit for SQL Injection in Sequelizejs Sequelize

CVE-2023-25813 CVE 정보 - CVE 번호: CVE-2023-25813https...

@24hr/content-next (>=1.0.0, <=2.1.17-alpha), @24hr/natswrapper (>=1.0.0, <=1.0.20) +205 more potentially affected by CVE-2023-25813 via sequelize (>=6.0.0-beta.4, <=6.19.0)

sequelize NPM version =6.0.0-beta.4, =1.0.0, =1.0.0, =0.1.0, =0.8.0, =1.0.43, =0.13.0, =13.0.7-feature-244b53-kvkvw2nk, =1.0.63, =0.1.3-alpha.0, =0.1.3-alpha.0, =0.1.0-alpha.0, =0.1.1-alpha.0, =0.3.0 and more Source cves: CVE-2023-25813 Source advisory: OSV:GHSA-WRH9-CJV3-2HPW...

CVE-2023-25813

Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through replacements are not properly escaped which can lead to arbitrary SQL injection depending on the specific queries in use. The issue has been fix...

CVE-2023-25813 SQL Injection via replacements in sequelize

Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through replacements are not properly escaped which can lead to arbitrary SQL injection depending on the specific queries in use. The issue has been fix...