CVE-2020-8203

01/תיאור (מקור, אנגלית)

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

02/מוצרים מושפעים

lodash: lodash; oracle: banking corporate lending process management; oracle: banking credit facilities process management; oracle: banking extensibility workbench; oracle: banking liquidity management; oracle: banking supply chain finance; oracle: banking trade finance process management; oracle: banking virtual account management; oracle: blockchain platform; oracle: communications billing and revenue management; oracle: communications cloud native core policy; oracle: communications session border controller; oracle: communications session router; oracle: communications subscriber-aware load balancer; oracle: enterprise communications broker

03/קישורים10

• github.com/lodash/lodash/issues/4874 Issue TrackingVendor Advisory
• github.com/lodash/lodash/issues/4874 Issue TrackingVendor Advisory
• www.oracle.com//security-alerts/cpujul2021.html PatchThird Party Advisory
• www.oracle.com/security-alerts/cpuApr2021.html PatchThird Party Advisory
• www.oracle.com/security-alerts/cpuapr2022.html PatchThird Party Advisory
• www.oracle.com/security-alerts/cpujan2022.html PatchThird Party Advisory
• www.oracle.com/security-alerts/cpuoct2021.html PatchThird Party Advisory
• www.oracle.com//security-alerts/cpujul2021.html PatchThird Party Advisory
• www.oracle.com/security-alerts/cpuApr2021.html PatchThird Party Advisory
• www.oracle.com/security-alerts/cpuapr2022.html PatchThird Party Advisory