CVE-2023-22580 MEDIUM

CVE-2023-22580: Sequalize - Bad query filtering leading to SQL errors

Vendor Feathers-Sequalize
Product Sequelize.js
Weakness CWE-200 · Info exposure
Published February 16, 2023
Last update April 1, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure.

Key dates

02Disclosure timeline

February 16, 2023 CVE published
April 1, 2025 Record updated