CVE-2023-22578
Sequalize - Default support for “raw attributes” when using parentheses
Résumé
Sequalize - Default support for “raw attributes” when using parentheses
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory csirt.divd.nl
- advisory github.com
- advisory nvd.nist.gov
- web csirt.divd.nl