Lucene search
Veracode Vulnerability DatabaseVERACODE:39340HistoryFeb 18, 2023 - 7:44 p.m.
Information Disclosure
2023-02-1819:44:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
38
sequelize
vulnerability
information disclosure
remote attacker
input filtering
sensitive information
0.001 Low
EPSS
Percentile
44.0%
sequelize is vulnerable to Information Disclosure. A remote unauthenticated attacker is able to inject malicious queries due to improper input filtering, resulting in the disclosure of sensitive information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sequelize | le | 7.0.0-alpha.9 | |
| sequelize | le | 6.28.0 | |
| @sequelize/core | le | 7.0.0-alpha.19 | |
| sequelize | le | 7.0.0-alpha.9 | |
| sequelize | le | 6.28.0 | |
| @sequelize/core | le | 7.0.0-alpha.19 |
Related
github
github
Sequelize information disclosure vulnerability
2023-02-16 15:30:28
prion
prion
Input validation
2023-02-16 15:15:00
cve
cve
CVE-2023-22580
2023-02-16 15:15:18
nvd
nvd
CVE-2023-22580
2023-02-16 15:15:18
osv
osv
Sequelize information disclosure vulnerability
2023-02-16 15:30:28
CVE-2023-22580
2023-02-16 15:15:18
cvelist
cvelist
CVE-2023-22580 Sequalize - Bad query filtering leading to SQL errors
2023-02-16 14:11:35
packetstorm
packetstorm
Tiki Wiki CMS Groupware 24.0 grid.php PHP Object Injection
2023-01-10 00:00:00
zdt
zdt
Tiki Wiki CMS Groupware 24.0 grid.php PHP Object Injection Vulnerability
2023-01-10 00:00:00
