Description

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure.

Remediation

References

https://csirt.divd.nl/CVE-2023-22580

https://csirt.divd.nl/DIVD-2022-00020/

Related Vulnerabilities

CVE-2021-23509 Vulnerability in npm package json-ptr

CVE-2022-25907 Vulnerability in npm package ts-deepmerge

CVE-2022-4520 Vulnerability in maven package org.wso2.carbon.registry:org.wso2.carbon.registry.search.ui

CVE-2023-5573 Vulnerability in npm package @vrite/sdk

CVE-2022-31194 Vulnerability in maven package org.dspace:dspace-jspui

Severity

High

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Third Party Advisory