Prototype Pollution Vulnerability in TypeORM Package by TypeORM
CVE-2020-8158
9.8CRITICAL
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2020-8158?
A prototype pollution vulnerability exists in the TypeORM package, which affects versions prior to 0.2.25. This flaw allows attackers to manipulate the properties of JavaScript objects. By exploiting this vulnerability, an attacker might inject or modify properties, potentially enabling further malicious actions such as denial of service attacks or SQL injection. Users of vulnerable versions are recommended to update promptly to prevent exploitation.
Affected Version(s)
typeorm Fixed Version: 0.2.25
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.