Lucene search
K

CVE-2022-33171

🗓️ 04 Jul 2022 15:51:49Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 138 Views🌐 WEB

The findOne function in TypeORM before 0.3.0 allows SQL injection via crafted FindOneOption

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
0day.today
TypeORM SQL Injection Vulnerability
1 Jul 202200:00
zdt
0day.today
TypeORM 0.3.7 Information Disclosure Vulnerability
16 Aug 202200:00
zdt
GithubExploit
Exploit for SQL Injection in Typeorm
8 Dec 202510:17
githubexploit
ATTACKERKB
CVE-2022-33171
4 Jul 202216:15
attackerkb
Circl
CVE-2022-33171
4 Jul 202220:12
circl
CNNVD
TypeORM SQL注入漏洞
1 Jul 202200:00
cnnvd
Check Point Advisories
TypeORM FindOne Authentication Bypass (CVE-2022-33171)
2 Nov 202200:00
checkpoint_advisories
Cvelist
CVE-2022-33171
4 Jul 202215:51
cvelist
Github Security Blog
SQL injection in typeORM
5 Jul 202200:00
github
NVD
CVE-2022-33171
4 Jul 202216:15
nvd
Rows per page
NVD
Node
typeormtypeormRange<0.3.0node.js
ParameterPositionPathDescriptionCWE
emailrequest body/authenticateSQL injection via findOneBy with user-supplied JSON in request body leading to data exposureCWE-89
passwordrequest body/authenticateSQL injection via findOneBy with user-supplied JSON in request body leading to data exposureCWE-89

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 07:07Current
9.6High risk
Vulners AI Score9.6
CVSS 27.5
CVSS 3.19.8
EPSS0.05298
SSVC
138