Описание
Sensitive Data Exposure in sequelize-cli
Versions of sequelize-cli prior to 5.5.0 are vulnerable to Sensitive Data Exposure. The function filteredURL() does not properly sanitize the config.password value which may cause passwords with special characters to be logged in plain text.
Recommendation
Upgrade to version 5.5.0 or later.
Пакеты
Наименование
sequelize-cli
npm
Затронутые версииВерсия исправления
<= 5.4.0
Отсутствует
3.5 Low
CVSS3
Дефекты
CWE-532
3.5 Low
CVSS3
Дефекты
CWE-532