Lucene search
AnonymousNODEJS:1674HistoryMay 06, 2021 - 4:14 p.m.
Arbitrary Code Execution
2021-05-0616:14:45
Anonymous
www.npmjs.com
55
0.011 Low
EPSS
Percentile
84.4%
Overview
The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Execution via the template function, particularly when a variable property is passed as an argument as it is not sanitized.
Recommendation
Upgrade to versions 1.12.1 or 1.13.0-2 or later
References
| CPE | Name | Operator | Version |
|---|---|---|---|
| underscore | ge | 1.3.2 <1.12.1 |
Related
fedora
fedora
[SECURITY] Fedora 33 Update: nodejs-underscore-1.13.1-1.fc33
2021-08-24 01:05:31
[SECURITY] Fedora 34 Update: nodejs-underscore-1.13.1-1.fc34
2021-08-24 03:33:12
atlassian
atlassian
CVE-2021-23358 - Need to upgrade Underscore.js to 1.13.1 or higher
2021-10-21 11:57:11
CVE-2021-23358 - Need to upgrade Underscore.js to 1.13.1 or higher
2021-06-02 16:03:32
CVE-2021-23358 - Need to upgrade Underscore.js to 1.13.1 or higher
2021-10-21 11:57:11
ibm
ibm
openvas
openvas
Tenable Nessus < 10.1.0 Arbitrary Code Injection Vulnerability (TNS-2022-04)
2022-11-07 00:00:00
Debian: Security Advisory (DLA-2613-1)
2021-04-01 00:00:00
Debian: Security Advisory (DSA-4883-1)
2021-04-03 00:00:00
veracode
veracode
Arbitrary Code Execution
2021-03-30 07:34:14
suse
suse
Security update for nodejs-underscore (important)
2021-04-23 00:00:00
osv
osv
underscore - security update
2021-03-31 00:00:00
underscore vulnerability
2021-04-14 16:53:02
Arbitrary Code Execution in underscore
2021-05-06 16:09:43
debian
debian
[SECURITY] [DLA 2613-1] underscore security update
2021-03-31 21:27:11
[SECURITY] [DSA 4883-1] underscore security update
2021-04-01 19:56:52
nessus
nessus
Debian DLA-2613-1 : underscore security update
2021-04-01 00:00:00
Ubuntu 21.04 : Underscore vulnerability (USN-4913-2)
2021-04-28 00:00:00
redhatcve
redhatcve
CVE-2021-23358
2021-03-29 18:02:58
nvd
nvd
CVE-2021-23358
2021-03-29 14:15:18
ubuntu
ubuntu
Underscore vulnerability
2021-04-14 00:00:00
Underscore vulnerability
2021-04-28 00:00:00
cve
cve
CVE-2021-23358
2021-03-29 14:15:18
ubuntucve
ubuntucve
CVE-2021-23358
2021-03-29 00:00:00
github
github
Arbitrary Code Execution in underscore
2021-05-06 16:09:43
mageia
mageia
Updated puddletag packages fix security vulnerability
2021-06-18 22:24:28
prion
prion
Code injection
2021-03-29 14:15:00
debiancve
debiancve
CVE-2021-23358
2021-03-29 14:15:18
cvelist
cvelist
CVE-2021-23358 Arbitrary Code Injection
2021-03-29 00:00:00
githubexploit
githubexploit
Exploit for Code Injection in Underscorejs Underscore
2023-02-25 19:12:13
tenable
tenable
[R2] Tenable.sc 5.19.0 Fixes Multiple Third-party Vulnerabilities
2021-07-22 18:11:52
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00