Description
Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.
Remediation
References
https://csirt.divd.nl/CVE-2023-22578
https://csirt.divd.nl/DIVD-2022-00020/
Related Vulnerabilities
CVE-2020-7663 Vulnerability in npm package websocket-extensions
CVE-2023-26109 Vulnerability in npm package node-bluetooth-serial-port
CVE-2022-23496 Vulnerability in maven package nl.basjes.parse.useragent:yauaa-logparser
CVE-2022-25758 Vulnerability in maven package org.webjars.npm:scss-tokenizer
CVE-2022-2218 Vulnerability in maven package org.webjars.npm:parse-url