CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2023-22580
High (7.5) in sequelizejs sequelize. EPSS 0.6% chance of exploitation in the next 30 days. Fixed in sequelize 6.28.1.
Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sequelizejs:sequelize
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-8c25-f3mj-v6h8 | npm | sequelize | <6.28.1 | 6.28.1 |
| GHSA-8c25-f3mj-v6h8 | npm | @sequelize/core | <7.0.0-alpha.20 | 7.0.0-alpha.20 |