CVE-2018-16487

🗓️ 01 Feb 2019 18:00:00Reported by hackeroneType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 1430 Views

Prototype pollution in lodash <4.17.11, allows manipulating Object.prototype

Reporter	Title	Published	Views	Family All 67
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities	18 Jul 202306:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition is vulnerable to Prototype Pollution flaw due to lodash.clonedeep	17 Dec 202510:49	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of the lodash library	17 Apr 202613:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses werkzeug-3.1.3,fonttools-4.60.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl,lodash.clonedeep-4.5.0.tgz,js-yaml-4.1.0.tgz,mdast-util-towhich is vulnerable to multiple CVEs	30 Jan 202605:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilties in IBM Rational Functional Tester / DevOps Test UI	4 Jun 202619:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software	14 Jan 202612:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Jan 202317:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by vulnerabilities in the shipped Node runtime	29 Mar 201910:55	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability affects IBM Cloud Object Storage SDK NodeJS (Mar 2019)	23 Jul 201920:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring WebFlux, Jenkins, Spring Securiy, Spring Framework, and Node.js lodash might affect IBM Storage Defender Copy Data Management.	5 May 202618:22	–	ibm

NVD

Vulners

Node

lodash lodashRange<4.17.11node.js

[
  {
    "product": "lodash",
    "vendor": "HackerOne",
    "versions": [
      {
        "status": "affected",
        "version": "<4.7.11"
      }
    ]
  }
]

Source	Link
hackerone	www.hackerone.com/reports/380873
security	www.security.netapp.com/advisory/ntap-20190919-0004/

21 Nov 2024 03:52Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.15.6

CVSS 26.8

EPSS0.00468

CWE-400