Lucene search

HackeroneCVELIST:CVE-2020-8203

HistoryJul 15, 2020 - 4:10 p.m.

CVE-2020-8203

2020-07-1516:10:27

CWE-770

hackerone

www.cve.org

8.2 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

JSON

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

CNA Affected

[
  {
    "product": "lodash",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Not Fixed"
      }
    ]
  }
]

References

github.com/lodash/lodash/issues/4874

hackerone.com/reports/712065

security.netapp.com/advisory/ntap-20200724-0006/

www.oracle.com//security-alerts/cpujul2021.html

www.oracle.com/security-alerts/cpuApr2021.html

www.oracle.com/security-alerts/cpuapr2022.html

www.oracle.com/security-alerts/cpujan2022.html

www.oracle.com/security-alerts/cpuoct2021.html