← לוח פגיעויות

CVE-2020-28500

בינונית 5.3

תיאור (מקור, אנגלית)

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.

מדדים

CVSS 3.1
5.3 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS — סבירות ניצול
7% (אחוזון 100) נכון ל-14/10/2026

מוצרים מושפעים

lodash: lodash; oracle: banking corporate lending process management; oracle: banking credit facilities process management; oracle: banking extensibility workbench; oracle: banking supply chain finance; oracle: banking trade finance process management; oracle: communications cloud native core policy; oracle: communications design studio; oracle: communications services gatekeeper; oracle: communications session border controller; oracle: enterprise communications broker; oracle: financial services crime and compliance management studio; oracle: health sciences data management workbench; oracle: jd edwards enterpriseone tools; oracle: peoplesoft enterprise peopletools

קישורים