Lucene search
GoogleOSV:GHSA-JF85-CPCP-J695HistoryJul 10, 2019 - 7:45 p.m.
Prototype Pollution in lodash
2019-07-1019:45:23
Google
osv.dev
30
EPSS
0.021
Percentile
89.2%
Versions of lodash before 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep allows a malicious user to modify the prototype of Object via {constructor: {prototype: {...}}} causing the addition or modification of an existing property that will exist on all objects.
Recommendation
Update to version 4.17.12 or later.
References
access.redhat.com/errata/RHSA-2019:3024
github.com/lodash/lodash/pull/4336
nvd.nist.gov/vuln/detail/CVE-2019-10744
security.netapp.com/advisory/ntap-20191004-0005
snyk.io/vuln/SNYK-JS-LODASH-450202
support.f5.com/csp/article/K47105354?utm_source=f5support&utm_medium=RSS
www.npmjs.com/advisories/1065
www.oracle.com/security-alerts/cpujan2021.html
www.oracle.com/security-alerts/cpuoct2020.html
Related
ibm
ibm
nodejs
nodejs
Prototype Pollution
2020-05-20 01:36:49
Prototype Pollution
2019-07-15 17:22:56
githubexploit
githubexploit
Exploit for CVE-2019-10744
2020-12-01 09:18:57
thn
thn
veracode
veracode
Prototype Pollution
2019-06-28 13:52:21
prion
prion
Design/Logic Flaw
2019-07-26 00:15:00
cvelist
cvelist
CVE-2019-10744
2019-07-25 23:43:03
cve
cve
CVE-2019-10744
2019-07-26 00:15:11
redhatcve
redhatcve
CVE-2019-10744
2020-04-09 10:52:58
CVE-2019-10747
2020-04-07 17:03:44
osv
osv
CVE-2019-10744
2019-07-26 00:15:11
ubuntucve
ubuntucve
CVE-2019-10744
2019-07-26 00:00:00
github
github
Prototype Pollution in lodash
2019-07-10 19:45:23
nessus
nessus
F5 Networks BIG-IP : Lodash library vulnerability (K47105354)
2020-04-24 00:00:00
Kibana < 6.8.2 Multiple Vulnerabilities
2020-03-05 00:00:00
Kibana 7.x < 7.2.1 Multiple Vulnerabilities
2020-03-05 00:00:00
debiancve
debiancve
CVE-2019-10744
2019-07-26 00:15:11
f5
f5
K47105354 : Lodash library vulnerability CVE-2019-10744
2019-11-13 00:00:00
nvd
nvd
CVE-2019-10744
2019-07-26 00:15:11
openvas
openvas
redhat
redhat
(RHSA-2019:3024) Moderate: ovirt-web-ui security and bug fix update
2019-10-10 14:49:46
(RHSA-2020:2362) Moderate: Red Hat OpenShift Service Mesh security update
2020-06-02 15:21:32
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00