Описание
sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. A fix was pushed out that fixed potential SQL injection in sequelize 2.1.3 and earlier.
Ссылки
- Release NotesThird Party Advisory
- Third Party Advisory
- Release NotesThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.1.3 (включая)
cpe:2.3:a:sequelizejs:sequelize:*:*:*:*:*:node.js:*:*
EPSS
Процентиль: 50%
0.00266
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-89
CWE-89
Связанные уязвимости
EPSS
Процентиль: 50%
0.00266
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-89
CWE-89