Orta CVSS 5.3 PoC var
CVE-2020-28500: Lodash: güvenlik açığı
Açıklama (NVD)
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.
Özet bilgiler
- Ürün
- Lodash Lodash
- CVSS v3.1
- 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - EPSS
- %7,34 (yüzdelik 94)
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| lodash-lodash | — | — | 4.17.21 |
| oracle-banking-corporate-lending-process-management | 14.2.0 | 14.2.0 | — |
| oracle-banking-corporate-lending-process-management | 14.3.0 | 14.3.0 | — |
| oracle-banking-corporate-lending-process-management | 14.5.0 | 14.5.0 | — |
| oracle-banking-credit-facilities-process-management | 14.2.0 | 14.2.0 | — |
| oracle-banking-credit-facilities-process-management | 14.3.0 | 14.3.0 | — |
| oracle-banking-credit-facilities-process-management | 14.5.0 | 14.5.0 | — |
| oracle-banking-extensibility-workbench | 14.2.0 | 14.2.0 | — |
| oracle-banking-extensibility-workbench | 14.3.0 | 14.3.0 | — |
| oracle-banking-extensibility-workbench | 14.5.0 | 14.5.0 | — |
| oracle-banking-supply-chain-finance | 14.2.0 | 14.2.0 | — |
| oracle-banking-supply-chain-finance | 14.3.0 | 14.3.0 | — |
| oracle-banking-supply-chain-finance | 14.5.0 | 14.5.0 | — |
| oracle-banking-trade-finance-process-management | 14.2.0 | 14.2.0 | — |
| oracle-banking-trade-finance-process-management | 14.3.0 | 14.3.0 | — |
| oracle-banking-trade-finance-process-management | 14.5.0 | 14.5.0 | — |
| oracle-communications-cloud-native-core-policy | 1.11.0 | 1.11.0 | — |
| oracle-communications-design-studio | 7.4.2 | 7.4.2 | — |
| oracle-communications-services-gatekeeper | 7.0 | 7.0 | — |
| oracle-communications-session-border-controller | 8.4 | 8.4 | — |
| oracle-communications-session-border-controller | 9.0 | 9.0 | — |
| oracle-enterprise-communications-broker | 3.2.0 | 3.2.0 | — |
| oracle-enterprise-communications-broker | 3.3.0 | 3.3.0 | — |
| oracle-financial-services-crime-and-compliance-management-studio | 8.0.8.2.0 | 8.0.8.2.0 | — |
| oracle-financial-services-crime-and-compliance-management-studio | 8.0.8.3.0 | 8.0.8.3.0 | — |
| oracle-health-sciences-data-management-workbench | 2.5.2.1 | 2.5.2.1 | — |
| oracle-health-sciences-data-management-workbench | 3.0.0.0 | 3.0.0.0 | — |
| oracle-jd-edwards-enterpriseone-tools | — | — | 9.2.6.1 |
| oracle-peoplesoft-enterprise-peopletools | 8.58 | 8.58 | — |
| oracle-peoplesoft-enterprise-peopletools | 8.59 | 8.59 | — |