Description
Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties leading to further denial of service or SQL injection attacks.
Remediation
References
https://hackerone.com/reports/869574
Related Vulnerabilities
CVE-2023-44487 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2015-9286 Vulnerability in npm package nodebb
CVE-2023-37277 Vulnerability in maven package org.xwiki.platform:xwiki-platform-rest-server
CVE-2023-25569 Vulnerability in maven package com.ctrip.framework.apollo:apollo
CVE-2022-2390 Vulnerability in maven package com.google.android.gms:play-services-basement