CVE-2023-22580
Published Feb 16, 2023
Last updated 2 years ago
Overview
- Description
- Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure.
- Source
- csirt@divd.nl
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.5
- Impact score
- 3.6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity
- HIGH
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:*:*:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "C6D41099-F18E-4C0F-8EF9-6EE5E3828496",
"versionEndExcluding": "6.28.1"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha1:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "4179FE6A-3886-4FA1-B490-CBF6B7CE0B9F"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha10:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "E16693FF-134A-41D1-986B-5FFA8E4986AD"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha11:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "FC165BC5-4E17-406B-BEFE-AF8FE179D251"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha12:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "3DA8AD1D-10AD-4AE6-9D7D-C1F263E1A405"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha13:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "E3819430-A940-4613-84AB-7D9976B44FCF"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha14:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "78CC6DC8-E66F-4761-B094-A573D9040C6D"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha15:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "AA275970-F6E9-4898-A1C4-070F51E9EDAE"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha16:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "5FDE1D82-C9AE-4648-B90A-05446ADE90BC"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha17:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "7C4849E3-51F0-4F96-B04F-734E965B6E49"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha18:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "D33B30B3-77B5-4726-A4F4-A87D16A96453"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha19:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "08603865-D895-49F5-BE44-11572ADBD6A6"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha2:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "84C4609A-DD50-40CB-B6F8-5EFB99D3A0E2"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha2.1:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "06A56CCA-72DE-46A5-B3E1-06B16FEBF4FF"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha2.2:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "433309DA-0220-4993-AF16-55BD8BB58AF6"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha3:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "0DDF5574-DF93-4D64-8665-8F6F0DB64DEB"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha4:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "6C2602C0-EA83-4C58-ADB5-54D997C7DC3A"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha5:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "5A5A8ED4-8B8D-4EB2-8877-A44879676061"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha6:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "3CFA85F4-2997-42F3-81D6-3646E8B2A9E9"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha7:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "25D004E2-EEAC-4931-AECC-4BACE1B53DB4"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha8:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "8F191D02-5ACE-45A8-8690-956E0E9692C4"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha9:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "7A482F6B-DF87-46E8-BFA4-FB78FB2508E1"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:oc_test_1:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "16D9C410-E3C0-4D1C-B6C9-241E44815CA8"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:oc_test_2:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "686AF958-F9CA-4E40-9F45-02178EDB14F5"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:oc_test_3:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "BC7AA901-F475-4C79-ABFE-0D3CFE544AD2"
},
{
"criteria": "cpe:2.3:a:sequelizejs:sequelize:7.0.0:oc_test_4:*:*:*:node.js:*:*",
"vulnerable": true,
"matchCriteriaId": "7E8293BE-2BAB-4B4F-9219-3DBA34F0EF0A"
}
],
"operator": "OR"
}
]
}
]