Lucene search
Veracode Vulnerability DatabaseVERACODE:39339HistoryFeb 18, 2023 - 7:30 p.m.
Type Confusion
2023-02-1819:30:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
34
sequelize
type confusion
vulnerability
code injection
parameter filtering
remote attacker
0.001 Low
EPSS
Percentile
39.3%
sequelize is vulnerable to Type Confusion. A remote attacker is able to inject malicious content due to improper parameter filtering, which results in type confusion, leading to code injection.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sequelize | le | 6.28.0 | |
| sequelize | le | 7.0.0-next.1 | |
| sequelize | le | 6.28.0 | |
| sequelize | le | 7.0.0-next.1 |
Related
osv
osv
Unsafe fall-through in getWhereConditions
2023-02-23 16:58:56
CVE-2023-22579
2023-02-16 15:15:18
github
github
Unsafe fall-through in getWhereConditions
2023-02-23 16:58:56
prion
prion
Input validation
2023-02-16 15:15:00
nvd
nvd
CVE-2023-22579
2023-02-16 15:15:18
cve
cve
CVE-2023-22579
2023-02-16 15:15:18
cvelist
cvelist
CVE-2023-22579 Sequalize - Unsafe fall-through in getWhereConditions
2023-02-16 14:11:37
