Lucene search
Veracode Vulnerability DatabaseVERACODE:20598HistoryJun 24, 2019 - 8:24 a.m.
SQL Injection
2019-06-2408:24:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
EPSS
0.002
Percentile
56.0%
sequelize is vulnerable to sql injection attacks. The attacks are possible because the library does not properly escape the JSON path key provided by user using mariadb dialects in query-generator.js.
Related
cvelist
cvelist
CVE-2019-10748
2019-10-28 21:42:45
osv
osv
CVE-2019-10748
2019-10-29 19:15:00
SQL Injection in sequelize
2019-11-06 17:11:10
nvd
nvd
CVE-2019-10748
2019-10-29 19:15:16
cve
cve
CVE-2019-10748
2019-10-29 19:15:16
nodejs
nodejs
SQL Injection
2019-06-24 15:07:08
github
github
SQL Injection in sequelize
2019-11-06 17:11:10
prion
prion
Sql injection
2019-10-29 19:15:00