icon

We found results for “

WS-2019-0045

Good to know:

icon
icon

Date: March 7, 2018

Versions of typeorm before 0.1.15 are vulnerable to SQL Injection. Field names are not properly validated allowing attackers to inject SQL statements and execute arbitrary SQL queries.

Language: JS

Severity Score

Severity Score

Weakness Type (CWE)

Injection

CWE-74

SQL Injection

CWE-89

Top Fix

icon

Upgrade Version

Upgrade to version 0.1.15

Learn More

CVSS v3

Base Score:
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C): PARTIAL
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us