writeups.xyz / TypeORM Prototype Pollution Leading To SQL Injection (CVE-2022-36531)

Submitter : c2a

Date: 21 September 2022

Bounty : undisclosed

Vulnerabilities :

• DoS
• SQL Injection

Programs :

• TypeORM

Authors :

• Norbert Szetei (@73696e65)
• Viktor Chuchurski (@Viktorot)

Link :
https://doyensec.com/resources/Doyensec_Advisory_TypeORM_Q32022.pdf