Description
The findOne function in TypeORM before 0.3.0 can either be supplied with a string or a FindOneOptions object. When input to the function is a user-controlled parsed JSON object, supplying a crafted FindOneOptions instead of an id string leads to SQL injection. NOTE: the vendor's position is that the user's application is responsible for input validation
Exploits (1)
References (4)
Scores
CVSS v3
9.8
EPSS
0.0320
EPSS Percentile
87.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lab Environment
Details
CWE
CWE-89
Status
published
Products (2)
npm/typeorm
0 - 0.3.0npm
typeorm/typeorm
< 0.3.0
Published
Jul 04, 2022
Tracked Since
Feb 18, 2026