CVE-2023-22579

high-risk
Published 2023-02-16

Due to improper parameter filtering in the sequalize js library, can a attacker peform injection.

Do I need to act?

-
0.42% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
+
Fix available
Upgrade to: d9e0728f2c2c5ae319f337c78091e1081440595d
9
CVSS 9.9/10 Critical
NETWORK / LOW complexity

Affected Products (20)

Sequelize
Sequelize
Sequelize
Sequelize
Sequelize
Sequelize
Sequelize
Sequelize
Sequelize
Sequelize
Sequelize
Sequelize
Sequelize
Sequelize
Sequelize
Sequelize
Sequelize
Sequelize
Sequelize
Sequelize

Affected Vendors

Sequelizejs

References (4)

Third Party Advisory https://csirt.divd.nl/CVE-2023-22579
Third Party Advisory https://csirt.divd.nl/DIVD-2022-00020/
Third Party Advisory https://csirt.divd.nl/CVE-2023-22579
Third Party Advisory https://csirt.divd.nl/DIVD-2022-00020/
56
/ 100
high-risk
Severity 33/34 · Critical
Exploitability 2/34 · Minimal
Exposure 21/34 · High