Description
Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.
Remediation
References
https://csirt.divd.nl/CVE-2023-22578
https://csirt.divd.nl/DIVD-2022-00020/
Related Vulnerabilities
CVE-2023-33246 Vulnerability in maven package org.apache.rocketmq:rocketmq-broker
CVE-2020-28442 Vulnerability in maven package org.webjars.bower:js-data
CVE-2017-16007 Vulnerability in npm package node-jose
CVE-2021-23771 Vulnerability in npm package notevil
CVE-2014-3490 Vulnerability in maven package org.jboss.resteasy:resteasy-jaxb-provider