Lucene search

Arbitrary Code Execution

🗓️ 08 Jun 2020 02:30:50Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 20 Views

class-validator vulnerability arbitrary code execution not setting forbidUnknownValue

Reporter	Title	Published	Views	Family All 8
OSV	CVE-2019-18413	24 Oct 201918:15	–	osv
OSV	SQL Injection and Cross-site Scripting in class-validator	12 Oct 202116:35	–	osv
CVE	CVE-2019-18413	24 Oct 201918:15	–	cve
NVD	CVE-2019-18413	24 Oct 201918:15	–	nvd
Cvelist	CVE-2019-18413	24 Oct 201900:00	–	cvelist
Prion	Sql injection	24 Oct 201918:15	–	prion
Github Security Blog	SQL Injection and Cross-site Scripting in class-validator	12 Oct 202116:35	–	github
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	18 Feb 202220:23	–	ibm

Vulners

Node

typestack_class-validator_project typestack_class-validatorMatch0.8.5

typestack_class-validator_project typestack_class-validatorRange≤0.13.2

Source	Link
github	www.github.com/typestack/class-validator/issues/438
github	www.github.com/typestack/class-validator/issues/1422
github	www.github.com/typestack/class-validator/issues/438
github	www.github.com/typestack/class-validator

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Jun 2020 02:50Current

4.0Medium risk

Vulners AI Score4.0

EPSS0.002