Vulnerability-Lookup

GHSA-CGPP-WM2H-6HQX

Vulnerability from github – Published: 2019-02-18 23:54 – Updated: 2020-08-31 18:11

Summary

SQL Injection in waterline-sequel

Details

Affected versions of waterline-sequel are vulnerable to SQL injection in cases where user input is passed into the like, contains, startsWith, or endsWith methods.

Recommendation

Upgrade to at least version 0.5.1

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "npm",
        "name": "waterline-sequel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.5.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2016-10551"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-89"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2020-06-16T21:31:36Z",
    "nvd_published_at": null,
    "severity": "HIGH"
  },
  "details": "Affected versions of `waterline-sequel` are vulnerable to SQL injection in cases where user input is passed into the `like`, `contains`, `startsWith`, or `endsWith` methods.\n\n\n\n## Recommendation\n\nUpgrade to at least version 0.5.1",
  "id": "GHSA-cgpp-wm2h-6hqx",
  "modified": "2020-08-31T18:11:18Z",
  "published": "2019-02-18T23:54:28Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10551"
    },
    {
      "type": "WEB",
      "url": "https://github.com/balderdashy/waterline/issues/1219#issuecomment-157294530"
    },
    {
      "type": "WEB",
      "url": "https://github.com/balderdashy/waterline-sequel/pull/66"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-cgpp-wm2h-6hqx"
    },
    {
      "type": "WEB",
      "url": "https://www.npmjs.com/advisories/115"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [],
  "summary": "SQL Injection in waterline-sequel"
}

CVE-2016-10551 (GCVE-0-2016-10551)

Vulnerability from cvelistv5 – Published: 2018-05-29 20:00 – Updated: 2024-09-16 16:58

Summary

waterline-sequel is a module that helps generate SQL statements for Waterline apps Any user input that goes into Waterline's `like`, `contains`, `startsWith`, or `endsWith` will end up in waterline-sequel with the potential for malicious code. A malicious user can input their own SQL statements in waterline-sequel 0.50 that will get executed and have full access to the database.

Severity ?

No CVSS data available.

CWE

CWE-89 - SQL Injection (CWE-89)

Assigner

hackerone

References

URL

Tags

	https://github.com/balderdashy/waterline/issues/1…	x_refsource_MISC
	https://nodesecurity.io/advisories/115	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	HackerOne	waterline-sequel node module	Affected: 0.5.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:21:52.163Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/balderdashy/waterline/issues/1219#issuecomment-157294530"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://nodesecurity.io/advisories/115"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "waterline-sequel node module",
          "vendor": "HackerOne",
          "versions": [
            {
              "status": "affected",
              "version": "0.5.0"
            }
          ]
        }
      ],
      "datePublic": "2018-04-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "waterline-sequel is a module that helps generate SQL statements for Waterline apps Any user input that goes into Waterline\u0027s `like`, `contains`, `startsWith`, or `endsWith` will end up in waterline-sequel with the potential for malicious code. A malicious user can input their own SQL statements in waterline-sequel 0.50 that will get executed and have full access to the database."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "SQL Injection (CWE-89)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-05-29T19:57:02",
        "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
        "shortName": "hackerone"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/balderdashy/waterline/issues/1219#issuecomment-157294530"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://nodesecurity.io/advisories/115"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "support@hackerone.com",
          "DATE_PUBLIC": "2018-04-26T00:00:00",
          "ID": "CVE-2016-10551",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "waterline-sequel node module",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "0.5.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "HackerOne"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "waterline-sequel is a module that helps generate SQL statements for Waterline apps Any user input that goes into Waterline\u0027s `like`, `contains`, `startsWith`, or `endsWith` will end up in waterline-sequel with the potential for malicious code. A malicious user can input their own SQL statements in waterline-sequel 0.50 that will get executed and have full access to the database."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "SQL Injection (CWE-89)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/balderdashy/waterline/issues/1219#issuecomment-157294530",
              "refsource": "MISC",
              "url": "https://github.com/balderdashy/waterline/issues/1219#issuecomment-157294530"
            },
            {
              "name": "https://nodesecurity.io/advisories/115",
              "refsource": "MISC",
              "url": "https://nodesecurity.io/advisories/115"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
    "assignerShortName": "hackerone",
    "cveId": "CVE-2016-10551",
    "datePublished": "2018-05-29T20:00:00Z",
    "dateReserved": "2017-10-29T00:00:00",
    "dateUpdated": "2024-09-16T16:58:50.345Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted