Prototype Pollution Vulnerability in TypeORM Package < 0.2.25: Exploiting Object Property Modification for Denial of Service and SQL Injection Attacks

Prototype Pollution Vulnerability in TypeORM Package < 0.2.25: Exploiting Object Property Modification for Denial of Service and SQL Injection Attacks

CVE-2020-8158 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties leading to further denial of service or SQL injection attacks.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.