Description

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure.

Remediation

References

https://csirt.divd.nl/CVE-2023-22580

https://csirt.divd.nl/DIVD-2022-00020/

Related Vulnerabilities

CVE-2017-1000404 Vulnerability in maven package se.diabol.jenkins.pipeline:delivery-pipeline-plugin

CVE-2021-23926 Vulnerability in maven package org.apache.xmlbeans:xmlbeans

CVE-2023-43495 Vulnerability in maven package org.jenkins-ci.main:jenkins-core

CVE-2020-2124 Vulnerability in maven package com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter

CVE-2022-41940 Vulnerability in maven package org.webjars.npm:engine.io

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Third Party Advisory CWE-200