Description

Sequelize, all versions prior to version 4.44.3 and 5.15.1, is vulnerable to SQL Injection due to sequelize.json() helper function not escaping values properly when formatting sub paths for JSON queries for MySQL, MariaDB and SQLite.

Remediation

References

https://snyk.io/vuln/SNYK-JS-SEQUELIZE-459751

https://github.com/sequelize/sequelize/commit/9bd0bc1%2C

https://github.com/sequelize/sequelize/commit/9bd0bc111b6f502223edf7e902680f7cc2ed541e

https://snyk.io/vuln/SNYK-JS-SEQUELIZE-459751%2C

Related Vulnerabilities

CVE-2020-7688 Vulnerability in npm package mversion

CVE-2022-25852 Vulnerability in npm package libpq

CVE-2019-5427 Vulnerability in maven package c3p0:c3p0

CVE-2017-16158 Vulnerability in npm package dcserver

CVE-2020-8298 Vulnerability in npm package fs-path

Severity

Critical

Classification

CWE-89 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Third Party Advisory Patch