Lucene search

K

Typestack Class-Validator Security Vulnerabilities

cve
cve

CVE-2019-18413

In TypeStack class-validator 0.10.2, validate() input validation can be bypassed because certain internal attributes can be overwritten via a conflicting name. Even though there is an optional forbidUnknownValues parameter that can be used to reduce the risk of this bypass, this option is not docum...

9.8CVSS

9.4AI Score

0.002EPSS

2019-10-24 06:15 PM
98
2