CVE Vulnerabilities

CVE-2023-22578

Published: Feb 16, 2023 | Modified: Mar 03, 2023
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.

Affected Software

Name Vendor Start Version End Version
Sequelize Sequelizejs * 6.29.0 (excluding)
Sequelize Sequelizejs 7.0.0-alpha1 (including) 7.0.0-alpha1 (including)
Sequelize Sequelizejs 7.0.0-alpha10 (including) 7.0.0-alpha10 (including)
Sequelize Sequelizejs 7.0.0-alpha11 (including) 7.0.0-alpha11 (including)
Sequelize Sequelizejs 7.0.0-alpha12 (including) 7.0.0-alpha12 (including)
Sequelize Sequelizejs 7.0.0-alpha13 (including) 7.0.0-alpha13 (including)
Sequelize Sequelizejs 7.0.0-alpha14 (including) 7.0.0-alpha14 (including)
Sequelize Sequelizejs 7.0.0-alpha15 (including) 7.0.0-alpha15 (including)
Sequelize Sequelizejs 7.0.0-alpha16 (including) 7.0.0-alpha16 (including)
Sequelize Sequelizejs 7.0.0-alpha17 (including) 7.0.0-alpha17 (including)
Sequelize Sequelizejs 7.0.0-alpha18 (including) 7.0.0-alpha18 (including)
Sequelize Sequelizejs 7.0.0-alpha19 (including) 7.0.0-alpha19 (including)
Sequelize Sequelizejs 7.0.0-alpha2 (including) 7.0.0-alpha2 (including)
Sequelize Sequelizejs 7.0.0-alpha2.1 (including) 7.0.0-alpha2.1 (including)
Sequelize Sequelizejs 7.0.0-alpha2.2 (including) 7.0.0-alpha2.2 (including)
Sequelize Sequelizejs 7.0.0-alpha3 (including) 7.0.0-alpha3 (including)
Sequelize Sequelizejs 7.0.0-alpha4 (including) 7.0.0-alpha4 (including)
Sequelize Sequelizejs 7.0.0-alpha5 (including) 7.0.0-alpha5 (including)
Sequelize Sequelizejs 7.0.0-alpha6 (including) 7.0.0-alpha6 (including)
Sequelize Sequelizejs 7.0.0-alpha7 (including) 7.0.0-alpha7 (including)
Sequelize Sequelizejs 7.0.0-alpha8 (including) 7.0.0-alpha8 (including)
Sequelize Sequelizejs 7.0.0-alpha9 (including) 7.0.0-alpha9 (including)
Sequelize Sequelizejs 7.0.0-oc_test_1 (including) 7.0.0-oc_test_1 (including)
Sequelize Sequelizejs 7.0.0-oc_test_2 (including) 7.0.0-oc_test_2 (including)
Sequelize Sequelizejs 7.0.0-oc_test_3 (including) 7.0.0-oc_test_3 (including)
Sequelize Sequelizejs 7.0.0-oc_test_4 (including) 7.0.0-oc_test_4 (including)

References