PT-2019-19997

Published

2019-06-05

·

Updated

2019-06-05

Description by

CVSS 3.1
3.5
Low
MetricsAV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions sequelize-cli versions prior to 5.5.0
Description The issue concerns Sensitive Data Exposure. The function filteredURL() does not properly sanitize the config.password value, which may cause passwords with special characters to be logged in plain text.
Recommendations For versions prior to 5.5.0, upgrade to version 5.5.0 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-3XC7-XG67-PW99
Found an issue in the description? Have something to add? Feel free to write us 👾