CVE-2023-22580

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure.

Score

CVSS 3.1 7.5 High

Status

Modified - csirt@divd.nl

Published

2023-02-16

Last modified

2025-04-01

Weaknesses

CWE-200

Affected products

• Sequelize.js (Feathers-sequalize)
• Sequelize (Sequelizejs)

References

• https://csirt.divd.nl/CVE-2023-22580
• https://csirt.divd.nl/DIVD-2022-00020/