CVE-2018-3721

🗓️ 07 Jun 2018 02:00:00Reported by hackeroneType

lodash module before 4.17.5 MAID vulnerabilit

Reporter	Title	Published	Views	Family All 73
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities	18 Jul 202306:14	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of the lodash library	17 Apr 202613:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilties in IBM Rational Functional Tester / DevOps Test UI	4 Jun 202619:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Jan 202317:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Voice Gateway	6 Dec 201818:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in WebSphere Service Registry and Repository in packages such as Apache Struts and Node.js	22 Mar 202216:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring WebFlux, Jenkins, Spring Securiy, Spring Framework, and Node.js lodash might affect IBM Storage Defender Copy Data Management.	5 May 202618:22	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Pulse application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	18 Oct 202213:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in lodash library affect Tivoli Netcool/OMNIbus WebGUI (CVE-2019-1010266, CVE-2020-28500, CVE-2018-16487, CVE-2018-3721, CVE-2020-8203, CVE-2021-23337, CVE-2019-10744)	27 Jun 202203:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is affected by vulnerabilities in Node JS modules (CVE-2018-3721 CVE-2016-10531)	29 Apr 201922:25	–	ibm

NVD

Vulners

Node

lodash lodashRange<4.17.5node.js

Node

netapp active_iq_unified_managerMatch-linux

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp active_iq_unified_managerMatch-windows

netapp system_managerMatch9.0

[
  {
    "product": "lodash node module",
    "vendor": "HackerOne",
    "versions": [
      {
        "status": "affected",
        "version": "Versions before 4.17.5"
      }
    ]
  }
]

Source	Link
hackerone	www.hackerone.com/reports/310443
security	www.security.netapp.com/advisory/ntap-20190919-0004/
github	www.github.com/lodash/lodash/commit/d8e069cc3410082e44eb18fcf8e7f3d08ebe1d4a

21 Nov 2024 04:05Current

6.3Medium risk

Vulners AI Score6.3

CVSS 24

CVSS 3.16.5

EPSS0.00249