664 matches found
Command injection
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...
CVE-2021-23337
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...
UBUNTU-CVE-2021-23337
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...
CVE-2021-23337 Command Injection
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...
CVE-2021-23337
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...
CVE-2021-23337
CVE-2021-23337 (Lodash) affects Lodash versions prior to 4.17.21, vulnerable to Command Injection via the template function. Affected component: lodash.template; root cause: unsafe template evaluation. Impact per document: potential code execution with privileges of the running environment. Mitig...
CVE-2021-23337
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...
DEBIAN-CVE-2020-28500
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...
CVE-2020-28500
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...
CVE-2020-28500
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...
AZL-44085 CVE-2020-28500 affecting package js-jquery 3.5.0-4
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...
CVE-2020-28500
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...
UBUNTU-CVE-2020-28500
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...
Design/Logic Flaw
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...
CVE-2020-28500 Regular Expression Denial of Service (ReDoS)
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...
CVE-2020-28500
CVE-2020-28500 affects Lodash prior to 4.17.21, vulnerability is Regular Expression Denial of Service (ReDoS) via toNumber, trim and trimEnd. Connected IBM bulletin confirms the issue and enumerates the affected versions; the remediation is to upgrade Lodash to 4.17.21 or later. No exploitation d...
CVE-2020-28500
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service ReDoS via the toNumber, trim and trimEnd functions...
lodash Security Vulnerabilities
lodash is an open source JavaScript utility library. A security vulnerability exists in lodash that stems from vulnerability to Regular Expression Denial of Service ReDoS attacks...
lodash code injection vulnerability
lodash is an open source JavaScript utility library. A code injection vulnerability exists in lodash, which arises from a network system or product that does not properly filter specific elements of externally entered data during the construction of executable commands. An attacker could exploit...
PT-2021-3188
Name of the Vulnerable Software and Affected Versions Lodash versions prior to 4.17.21 Description The issue is related to Command Injection via the template function, which can be exploited by a remote attacker to execute arbitrary commands. This is due to the lack of neutralization of special...