VDB
BDU%3A2019-02911
BDU%3A2019-02911
PUBLISHED
CVSS 7.5 HIGH
Уязвимость функции defaultsDeep библиотеки Lodash, позволяющая нарушителю вызвать отказ в обслуживании, выполнить произвольный JavaScript-код или повысить свои привилегии
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| John-David Dalton, Oracle Corp. | lodash, Oracle Banking Extensibility Workbench |
Timeline
- Aug 20, 2019 CVE Published
- Mar 23, 2021 CVE Updated
References
- https://github.com/lodash/lodash/pull/4336 url
- https://access.redhat.com/security/cve/cve-2019-10744 url
- https://snyk.io/vuln/SNYK-JS-LODASH-450202 url
- https://nvd.nist.gov/vuln/detail/CVE-2019-10744 url
- https://github.com/lodash/lodash/commit/a01e4fa727e7294cb7b2845570ba96b206926790 url
- https://www.oracle.com/security-alerts/cpujan2021.html advisory