Lucene search
+L

1 matches found

zdt
zdt
added 2022/08/16 12:0 a.m.392 views

TypeORM 0.3.7 Information Disclosure Vulnerability

I found what I think is a vulnerability in the latest typeorm 0.3.7. TypeORM v0.3 has a new findOneBy method instead of findOneById and it is the only way to get a record by id Sending undefined as a value in this method removes this parameter from the query. This leads to the data exposure. For...

9.8CVSS9.7AI score0.20299EPSS
SaveExploits6
Rows per page
Query Builder