← לוח פגיעויות

CVE-2021-23337

גבוהה 7.2

תיאור (מקור, אנגלית)

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

מדדים

CVSS 3.1
7.2 (HIGH) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS — סבירות ניצול
21% (אחוזון 100) נכון ל-14/10/2026
CWE
CWE-94

מוצרים מושפעים

lodash: lodash; oracle: banking corporate lending process management; oracle: banking credit facilities process management; oracle: banking extensibility workbench; oracle: banking supply chain finance; oracle: banking trade finance process management; oracle: communications cloud native core binding support function; oracle: communications cloud native core policy; oracle: communications design studio; oracle: communications services gatekeeper; oracle: communications session border controller; oracle: enterprise communications broker; oracle: financial services crime and compliance management studio; oracle: health sciences data management workbench; oracle: jd edwards enterpriseone tools

קישורים