Description
SQL injection vulnerability in Sequelize before 2.0.0-rc7 for Node.js allows remote attackers to execute arbitrary SQL commands via the order parameter.
Remediation
References
http://www.openwall.com/lists/oss-security/2015/01/23/2
https://github.com/sequelize/sequelize/pull/2919
https://nodesecurity.io/advisories/sequelize-sql-injection-order
Related Vulnerabilities
CVE-2017-16222 Vulnerability in npm package elding
CVE-2018-3726 Vulnerability in npm package crud-file-server
CVE-2017-3165 Vulnerability in maven package org.apache.brooklyn:brooklyn-jsgui
CVE-2023-43961 Vulnerability in maven package cn.dev33:sa-token-core
CVE-2016-10540 Vulnerability in maven package org.webjars.npm:minimatch