CVE-2023-22578 — Sequalize - Default support for “raw attributes” when using parentheses

CVE-2023-22578

Sequalize - Default support for “raw attributes” when using parentheses PUBLISHED

Description (CNA)

Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.

Vendor / product	Versions
Feathers-Sequalize / Sequelize.js	affected <v7.0.0-alpha.20

CWE-790

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.