AZL-44655 CVE-2021-23337 affecting package js-jquery 3.5.0-4

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...

CVE-2021-23337

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...

Command injection

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...

CVE-2021-23337 Command Injection

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...

CVE-2021-23337

CVE-2021-23337 (Lodash) affects Lodash versions prior to 4.17.21, vulnerable to Command Injection via the template function. Affected component: lodash.template; root cause: unsafe template evaluation. Impact per document: potential code execution with privileges of the running environment. Mitig...

CVE-2021-23337

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...

CVE-2021-23337

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...

CVE-2021-23337 Command Injection

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...

CVE-2021-23337

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...

CVE-2021-23337: Improper Control of Generation of Code

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...

Code Injection

Overview Affected versions of this package are vulnerable to Code Injection due the improper validation of options.variable key names in .template. An attacker can execute arbitrary code at template compilation time by injecting malicious expressions. If Object.prototype has been polluted,...

The vulnerability of the template function for Cisco Webex Meetings software allows a hacker to delete any meeting template they desire.

The vulnerability of the template function for Cisco Webex Meetings software-related web conferencing solutions is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to delete any meeting template at will...

Remote Code Execution (RCE)

access-policy is vulnerable to remote code execution RCE. The attack is possible because user-provided data is directly executed by the eval in the template function without validation...

CVE-2020-7674

access-policy through 3.1.0 is vulnerable to Arbitrary Code Execution. User input provided to the template function is executed by the eval function resulting in code execution...

Remote code execution

access-policy through 3.1.0 is vulnerable to Arbitrary Code Execution. User input provided to the template function is executed by the eval function resulting in code execution...

CVE-2020-7674

access-policy through 3.1.0 is vulnerable to Arbitrary Code Execution. User input provided to the template function is executed by the eval function resulting in code execution...

CVE-2020-7674

CVE-2020-7674 affects access-policy up to version 3.1.0. The vulnerability is caused by user input passed to the template function being executed by eval, enabling arbitrary code execution. Affected component: access-policy encoder/parser. Impact is Arbitary Code Execution with the exact exploita...

CVE-2020-7674

access-policy through 3.1.0 is vulnerable to Arbitrary Code Execution. User input provided to the "template" function is executed by the "eval" function resulting in code execution...

PT-2020-19700

Name of the Vulnerable Software and Affected Versions access-policy versions prior to 3.1.0 Description The issue allows for Arbitrary Code Execution. This occurs because user input provided to the template function is executed by the eval function, resulting in code execution. Recommendations Fo...

CVE-2020-7674: Improper Control of Generation of Code

access-policy through 3.1.0 is vulnerable to Arbitrary Code Execution. User input provided to the template function is executed by the eval function resulting in code execution...