Lucene search
Veracode Vulnerability DatabaseVERACODE:39313HistoryFeb 17, 2023 - 6:27 a.m.
SQL Injection
2023-02-1706:27:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
59
sql injection
sequelize
vulnerability
improper attribute filtering
target system
attack statement
0.002 Low
EPSS
Percentile
51.7%
sequelize is vulnerable to SQL Injection attacks. A specifically crafted attack statement through query-generator.js allows a malicious user to inject and execute arbitrary SQL queries on the target system due to improper attribute filtering.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sequelize | le | 6.28.2 | |
| sequelize | le | 7.0.0-next.1 | |
| sequelize | le | 6.28.2 | |
| sequelize | le | 7.0.0-next.1 |
Related
nvd
nvd
CVE-2023-22578
2023-02-16 15:15:18
osv
osv
Sequelize - Default support for “raw attributes” when using parentheses
2023-02-24 18:48:49
CVE-2023-22578
2023-02-16 15:15:18
prion
prion
Sql injection
2023-02-16 15:15:00
cvelist
cvelist
cve
cve
CVE-2023-22578
2023-02-16 15:15:18
github
github
Sequelize - Default support for “raw attributes” when using parentheses
2023-02-24 18:48:49
