CVE-2023-22579: Sequalize - Unsafe fall-through in getWhereConditions
Published Feb 16, 2023
·Updated
Due to improper parameter filtering in the sequalize js library, can a attacker peform injection.
Affected Software
26 affected components
Sequelizejs Sequelize Node.js<6.28.1
Sequelizejs Sequelize Node.js=7.0.0-alpha1
Sequelizejs Sequelize Node.js=7.0.0-alpha10
Sequelizejs Sequelize Node.js=7.0.0-alpha11
Sequelizejs Sequelize Node.js=7.0.0-alpha12
Sequelizejs Sequelize Node.js=7.0.0-alpha13
Sequelizejs Sequelize Node.js=7.0.0-alpha14
Sequelizejs Sequelize Node.js=7.0.0-alpha15
Sequelizejs Sequelize Node.js=7.0.0-alpha16
Sequelizejs Sequelize Node.js=7.0.0-alpha17
Sequelizejs Sequelize Node.js=7.0.0-alpha18
Sequelizejs Sequelize Node.js=7.0.0-alpha19
Sequelizejs Sequelize Node.js=7.0.0-alpha2
Sequelizejs Sequelize Node.js=7.0.0-alpha2.1
Sequelizejs Sequelize Node.js=7.0.0-alpha2.2
Sequelizejs Sequelize Node.js=7.0.0-alpha3
Sequelizejs Sequelize Node.js=7.0.0-alpha4
Sequelizejs Sequelize Node.js=7.0.0-alpha5
Sequelizejs Sequelize Node.js=7.0.0-alpha6
Sequelizejs Sequelize Node.js=7.0.0-alpha7
Sequelizejs Sequelize Node.js=7.0.0-alpha8
Sequelizejs Sequelize Node.js=7.0.0-alpha9
Sequelizejs Sequelize Node.js=7.0.0-oc_test_1
Sequelizejs Sequelize Node.js=7.0.0-oc_test_2
Sequelizejs Sequelize Node.js=7.0.0-oc_test_3
Sequelizejs Sequelize Node.js=7.0.0-oc_test_4
Event History
Feb 16, 2023
CVE Published
via MITRE·02:11 PM
Data Sourced
via MITRE·02:11 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-22579?
CVE-2023-22579 is a vulnerability in the sequalize js library that allows an attacker to perform injection attacks due to improper parameter filtering.
2
What is the severity of CVE-2023-22579?
CVE-2023-22579 has a severity rating of 8.8, which is classified as critical.
3
How does CVE-2023-22579 affect the Sequelizejs library?
CVE-2023-22579 affects versions of Sequelizejs prior to 7.0.0 alpha 20.
4
How can an attacker exploit CVE-2023-22579?
An attacker can exploit CVE-2023-22579 by injecting malicious code or SQL statements through improperly filtered parameters in the Sequelizejs library.
5
How can I fix CVE-2023-22579?
To fix CVE-2023-22579, it is recommended to update to a version of Sequelizejs that is higher than or equal to 7.0.0 alpha 20.