CVE-2016-10553CWE-89

CVE-2016-10553: vulnerability in HackerOne sequelize node module

Published · Updated

Follow this CVE+ Monitor sequelize node module+ Monitor sequelize

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. A fix was pushed out that fixed potential SQL injection in sequelize 2.1.3 and earlier.
Affected products
HackerOne · sequelize node module
Related CVEs — HackerOne sequelize node module

In the same product, most dangerous first.

CVE-2016-10550—CVE-2016-10550EPSS 1.9%CVE-2016-10554—CVE-2016-10554EPSS 1.9%CVE-2016-10556—CVE-2016-10556EPSS 1.3%