CVE-2023-22579

Summary

Due to improper parameter filtering in the sequalize js library, can a attacker peform injection.

Affected Software

VendorProductVersion RangeStatus
Feathers-SequalizeSequelize.js<v7.0.0-alpha.20affected

Weaknesses

  • CWE-843: CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References