Yüksek CVSS 7.2 PoC var
CVE-2021-23337: Lodash: kod enjeksiyonu
Açıklama (NVD)
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.
Özet bilgiler
- Ürün
- Lodash Lodash
- CVSS v3.1
- 7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - EPSS
- %21,33 (yüzdelik 98)
- CWE
- CWE-94
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| lodash-lodash | — | — | 4.17.21 |
| oracle-banking-corporate-lending-process-management | 14.2.0 | 14.2.0 | — |
| oracle-banking-corporate-lending-process-management | 14.3.0 | 14.3.0 | — |
| oracle-banking-corporate-lending-process-management | 14.5.0 | 14.5.0 | — |
| oracle-banking-credit-facilities-process-management | 14.2.0 | 14.2.0 | — |
| oracle-banking-credit-facilities-process-management | 14.3.0 | 14.3.0 | — |
| oracle-banking-credit-facilities-process-management | 14.5.0 | 14.5.0 | — |
| oracle-banking-extensibility-workbench | 14.2.0 | 14.2.0 | — |
| oracle-banking-extensibility-workbench | 14.3.0 | 14.3.0 | — |
| oracle-banking-extensibility-workbench | 14.5.0 | 14.5.0 | — |
| oracle-banking-supply-chain-finance | 14.2.0 | 14.2.0 | — |
| oracle-banking-supply-chain-finance | 14.3.0 | 14.3.0 | — |
| oracle-banking-supply-chain-finance | 14.5.0 | 14.5.0 | — |
| oracle-banking-trade-finance-process-management | 14.2.0 | 14.2.0 | — |
| oracle-banking-trade-finance-process-management | 14.3.0 | 14.3.0 | — |
| oracle-banking-trade-finance-process-management | 14.5.0 | 14.5.0 | — |
| oracle-communications-cloud-native-core-binding-support-function | 1.9.0 | 1.9.0 | — |
| oracle-communications-cloud-native-core-policy | 1.11.0 | 1.11.0 | — |
| oracle-communications-design-studio | 7.4.2.0.0 | 7.4.2.0.0 | — |
| oracle-communications-services-gatekeeper | 7.0 | 7.0 | — |
| oracle-communications-session-border-controller | 8.4 | 8.4 | — |
| oracle-communications-session-border-controller | 9.0 | 9.0 | — |
| oracle-enterprise-communications-broker | 3.2.0 | 3.2.0 | — |
| oracle-enterprise-communications-broker | 3.3.0 | 3.3.0 | — |
| oracle-financial-services-crime-and-compliance-management-studio | 8.0.8.2.0 | 8.0.8.2.0 | — |
| oracle-financial-services-crime-and-compliance-management-studio | 8.0.8.3.0 | 8.0.8.3.0 | — |
| oracle-health-sciences-data-management-workbench | 2.5.2.1 | 2.5.2.1 | — |
| oracle-health-sciences-data-management-workbench | 3.0.0.0 | 3.0.0.0 | — |
| oracle-jd-edwards-enterpriseone-tools | — | — | 9.2.6.1 |
| oracle-peoplesoft-enterprise-peopletools | 8.58 | 8.58 | — |