CVE-2023-22580CWE-200

Sequalize - Bad query filtering leading to SQL errors

Medium · published February 16, 2023

CVSS v3.1
5.3
EPSS
1%
Percentile
47.1
In the wild
Unconfirmed
What it is

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00582 · 47.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-02-16T14:11Z
EPSS history
Timeline
  • 16 FEB 14:11Z
    Sequalize - Bad query filtering leading to SQL errors
    cvelistv5