Description

Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties leading to further denial of service or SQL injection attacks.

Remediation

References

https://hackerone.com/reports/869574

Related Vulnerabilities

CVE-2023-47324 Vulnerability in maven package org.silverpeas.core:silverpeas-core-war

CVE-2023-26118 Vulnerability in npm package angular

CVE-2022-23496 Vulnerability in maven package nl.basjes.parse.useragent:yauaa-logparser

CVE-2022-39322 Vulnerability in npm package @keystone-6/core

CVE-2021-41183 Vulnerability in npm package jquery-ui

Severity

Critical

Classification

CWE-1321 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Patch Third Party Advisory