Lucene search

SQL Injection and Cross-site Scripting in class-validator

🗓️ 12 Oct 2021 16:45:35Reported by GoogleType

osv🔗 osv.dev👁 25 Views

In TypeStack class-validator, input validation bypass vulnerability allows SQL Injection and XSS attack

Reporter	Title	Published	Views	Family All 8
Veracode	Arbitrary Code Execution	8 Jun 202002:50	–	veracode
OSV	CVE-2019-18413	24 Oct 201918:15	–	osv
CVE	CVE-2019-18413	24 Oct 201918:15	–	cve
NVD	CVE-2019-18413	24 Oct 201918:15	–	nvd
Cvelist	CVE-2019-18413	24 Oct 201900:00	–	cvelist
Prion	Sql injection	24 Oct 201918:15	–	prion
Github Security Blog	SQL Injection and Cross-site Scripting in class-validator	12 Oct 202116:35	–	github
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	18 Feb 202220:23	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-18413
github	www.github.com/typestack/class-validator/issues/1422
github	www.github.com/typestack/class-validator/issues/438
github	www.github.com/typestack/class-validator/issues/438
github	www.github.com/typestack/class-validator/pull/1798
github	www.github.com/typestack/class-validator
github	www.github.com/typestack/class-validator

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Oct 2021 16:35Current

3.6Low risk

Vulners AI Score3.6

EPSS0.002