Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
•added 2023/02/16 3:30 p.m.•29 views

Duplicate advisory: Sequelize - Unsafe fall-through in getWhereConditions

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vqfx-gj96-3w95. This link is maintained to preserve external references. Original Description Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...

9.9CVSS2.4AI score0.00809EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2023/02/16 3:15 p.m.•60 views

CVE-2023-22580

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure...

7.5CVSS6AI score0.00582EPSS
SaveExploits2References2
Mend
Mend
•added 2023/02/16 2:11 p.m.•3 views

CVE-2023-22579

Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...

9.9CVSS0.00809EPSS
SaveExploits0References12
Mend
Mend
•added 2023/02/16 2:11 p.m.•3 views

CVE-2023-22578

Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections...

10CVSS0.00831EPSS
SaveExploits0References11
OSV
OSV
•added 2023/02/16 2:11 p.m.•50 views

CVE-2023-22580 Sequalize - Bad query filtering leading to SQL errors

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure...

5.3CVSS7AI score
SaveExploits0References4
CVE
CVE
•added 2023/02/16 2:11 p.m.•140 views

CVE-2023-22580

CVE-2023-22580 describes a vulnerability in the Sequelize JS library where improper input filtering can allow malicious queries to disclose sensitive information. The issue affects Sequelize (library/file level) and is associated with a confidentiality impact (per CVSS) without explicit exploit d...

7.5CVSS5.9AI score0.00582EPSS
SaveExploits2References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/16 12:00 a.m.•3 views

CVE-2023-22578: Improper Filtering of Special Elements

Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections...

10CVSS5.8AI score0.00831EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/16 12:00 a.m.•1 views

CVE-2023-22580: Exposure of Sensitive Information to an Unauthorized Actor

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure...

7.5CVSS5.8AI score0.00582EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/16 12:00 a.m.•5 views

CVE-2023-22579: Access of Resource Using Incompatible Type

Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...

9.9CVSS5.8AI score0.00809EPSS
SaveExploits0References3
Rows per page
Query Builder