MEDIUM 5.3 npm
Sequelize information disclosure vulnerability
GHSA-8c25-f3mj-v6h8 · CVE-2023-22580
Published · Modified
Description
Due to improper input filtering in the sequelize js library, can malicious queries lead to sensitive information disclosure.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2023-22580
- WEB https://github.com/sequelize/sequelize/pull/15375
- WEB https://github.com/sequelize/sequelize/pull/15699
- WEB https://csirt.divd.nl/CVE-2023-22580
- WEB https://csirt.divd.nl/DIVD-2022-00020
- PACKAGE https://github.com/sequelize/sequelize
- WEB https://github.com/sequelize/sequelize/releases/tag/v6.28.1
- WEB https://github.com/sequelize/sequelize/releases/tag/v7.0.0-alpha.20
Ready to move
Start Securing
Free, no credit card | First findings in minutes