CVE-2016-1000225
SQL Injection via GeoJSON
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según GHSA, Node.js Security WG.
Descripción
SequelizeJS 3.23.4 is vulnerable to SQL injection via GeoJSON documents containing a value with a single quote. This vulnerability affects postresql/postgis as well as MySQL. This vulnerability only exists within GeoJSON documents using the function `ST_GeomFromGeoJSON` for postgresql/postgis and the function `GeomFromText` for mysql. SequelizeJS's `geometry` datatype is vulnerable. If you have SequelizeJS models with a field that has a datatype of 'Geometry' and run a mysql or postgresql/postgis backend, your application is vulnerable SequelizeJS is a popular ORM (Object Relational Mapper) for node. GeoJSON is a format for encoding a variety of geographic data structures.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| npm::GitHub Security Advisory npm | sequelize | 3.23.6 |
| npm::Node.js Ecosystem Security Working Group | sequelize | >=3.23.6 |
Referencias
- http://docs.sequelizejs.com/en/latest/api/datatypes/#geometry
- http://geojson.org/
- https://github.com/sequelize/sequelize
- https://github.com/sequelize/sequelize/commit/14e3deaf3ad27f12900e5275db1d448844c9de3e
- https://github.com/sequelize/sequelize/commit/18ac91040d9c57351d26ba998f460e214255b704
- https://github.com/sequelize/sequelize/commit/562d52585902090f4e53eb21c61314098c29d795
- https://github.com/sequelize/sequelize/commit/f93af43a1d86400487f5e3d9762f1a4b7cf6b1e1
- https://github.com/sequelize/sequelize/issues/6194