Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Jamsea

#25053de 53,632
9.8CVSS total
Vulnerabilidades · 1
PT-2018-4729
9.8
2018-05-29
Sailjs · Waterline-Sequel · CVE-2016-10551
**Name of the Vulnerable Software and Affected Versions** waterline-sequel versions 0.50 **Description** The issue allows malicious users to input their own SQL statements, which can be executed and provide full access to the database. This occurs when user input is passed into the `like`, `contains`, `startsWith`, or `endsWith` methods in waterline-sequel. **Recommendations** Upgrade to at least version 0.5.1