Yüksek CVSS 7.4 PoC var
CVE-2020-8203: Lodash: güvenlik açığı
Açıklama (NVD)
Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.
Özet bilgiler
- Ürün
- Lodash Lodash
- CVSS v3.1
- 7.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H - EPSS
- %5,21 (yüzdelik 93)
- CWE
- CWE-770
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| lodash-lodash | — | — | 4.17.20 |
| oracle-banking-corporate-lending-process-management | 14.2.0 | 14.2.0 | — |
| oracle-banking-corporate-lending-process-management | 14.3.0 | 14.3.0 | — |
| oracle-banking-corporate-lending-process-management | 14.5.0 | 14.5.0 | — |
| oracle-banking-credit-facilities-process-management | 14.2.0 | 14.2.0 | — |
| oracle-banking-credit-facilities-process-management | 14.3.0 | 14.3.0 | — |
| oracle-banking-credit-facilities-process-management | 14.5.0 | 14.5.0 | — |
| oracle-banking-extensibility-workbench | 14.2.0 | 14.2.0 | — |
| oracle-banking-extensibility-workbench | 14.3.0 | 14.3.0 | — |
| oracle-banking-extensibility-workbench | 14.5.0 | 14.5.0 | — |
| oracle-banking-liquidity-management | 14.2.0 | 14.2.0 | — |
| oracle-banking-liquidity-management | 14.3.0 | 14.3.0 | — |
| oracle-banking-liquidity-management | 14.5.0 | 14.5.0 | — |
| oracle-banking-supply-chain-finance | 14.2.0 | 14.2.0 | — |
| oracle-banking-supply-chain-finance | 14.3.0 | 14.3.0 | — |
| oracle-banking-supply-chain-finance | 14.5.0 | 14.5.0 | — |
| oracle-banking-trade-finance-process-management | 14.2.0 | 14.2.0 | — |
| oracle-banking-trade-finance-process-management | 14.3.0 | 14.3.0 | — |
| oracle-banking-trade-finance-process-management | 14.5.0 | 14.5.0 | — |
| oracle-banking-virtual-account-management | 14.2.0 | 14.2.0 | — |
| oracle-banking-virtual-account-management | 14.3.0 | 14.3.0 | — |
| oracle-banking-virtual-account-management | 14.5.0 | 14.5.0 | — |
| oracle-blockchain-platform | — | — | 21.1.2 |
| oracle-communications-billing-and-revenue-management | 7.5.0.23.0 | 7.5.0.23.0 | — |
| oracle-communications-billing-and-revenue-management | 12.0.0.3.0 | 12.0.0.3.0 | — |
| oracle-communications-cloud-native-core-policy | 1.11.0 | 1.11.0 | — |
| oracle-communications-session-border-controller | 8.4 | 8.4 | — |
| oracle-communications-session-border-controller | 9.0 | 9.0 | — |
| oracle-communications-session-border-controller | cz8.4 | cz8.4 | — |
| oracle-communications-session-router | cz8.4 | cz8.4 | — |