pentester.land· Sep 21, 2022· by Norbert Szetei (@73696e65), Viktor Chuchurski (@viktorot)🔍 CVE-2022-36531

TypeORM Prototype Pollution Leading To SQL Injection (CVE-2022-36531)

Open Original Article ↗
Target Program: TypeORM
🎯 Vulnerability: SQL Injection (SQLi)
💡 Defense Fix: Use Parameterized Prepared Statements (ORM) for all database queries and disable verbose error messages.
#DoS#SQL injection#CVE-2022-36531