GHSA-jqv5-7xpx-qj74
sqlite vulnerable to code execution due to Object coercion
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2022-43441
- CVSS_V3
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
### Impact Due to the underlying implementation of `.ToString()`, it's possible to execute arbitrary JavaScript, or to achieve a denial-of-service, if a binding parameter is a crafted Object. Users of `sqlite3` v5.0.0 - v5.1.4 are affected by this. ### Patches Fixed in v5.1.5. All users are recommended to upgrade to v5.1.5 or later. ### Workarounds * Ensure there is sufficient sanitization in the parent application to protect against invalid values being supplied to binding parameters. ### References * Commit: https://github.com/TryGhost/node-sqlite3/commit/edb1934dd222ae55632e120d8f64552d5191c781 ### For more information If you have any questions or comments about this advisory: * Email us at [security@ghost.org](mailto:security@ghost.org) Credits: Dave McDaniel of Cisco Talos
Paquets affectés
| Paquet | Versions |
|---|---|
| npm · sqlite3 | introduced 5.0.0, fixed 5.1.5 |
Références
- https://github.com/TryGhost/node-sqlite3/security/advisories/GHSA-jqv5-7xpx-qj74 WEB
- https://nvd.nist.gov/vuln/detail/CVE-2022-43441 ADVISORY
- https://github.com/TryGhost/node-sqlite3/commit/edb1934dd222ae55632e120d8f64552d5191c781 WEB
- https://github.com/TryGhost/node-sqlite3 PACKAGE
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1645 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |