Lucene search

CVE-2019-18413

🗓️ 24 Oct 2019 18:11:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 109 Views🌐 2 Media mentions

CVE-2019-18413: TypeStack class-validator 0.10.2 input validation bypass allows SQL Injection or XSS attacks

Reporter	Title	Published	Views	Family All 8
Veracode	Arbitrary Code Execution	8 Jun 202002:50	–	veracode
OSV	CVE-2019-18413	24 Oct 201918:15	–	osv
OSV	SQL Injection and Cross-site Scripting in class-validator	12 Oct 202116:35	–	osv
NVD	CVE-2019-18413	24 Oct 201918:15	–	nvd
Cvelist	CVE-2019-18413	24 Oct 201900:00	–	cvelist
Prion	Sql injection	24 Oct 201918:15	–	prion
Github Security Blog	SQL Injection and Cross-site Scripting in class-validator	12 Oct 202116:35	–	github
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	18 Feb 202220:23	–	ibm

Nvd

Node

typestack_class-validator_project typestack_class-validatorMatch0.10.2

Source	Link
github	www.github.com/typestack/class-validator
github	www.github.com/typestack/class-validator/issues/1422
github	www.github.com/typestack/class-validator/issues/438
github	www.github.com/typestack/class-validator/issues/438

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Oct 2019 18:15Current

9.4High risk

Vulners AI Score9.4

CVSS27.5

CVSS39.8

EPSS0.002