Lucene search
Veracode Vulnerability DatabaseVERACODE:20624HistoryJun 28, 2019 - 1:52 p.m.
Prototype Pollution
2019-06-2813:52:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
23
EPSS
0.021
Percentile
89.2%
lodash is vulnerable to prototype pollution. The vulnerability exists due to the ability to inject properties in _.defaultsDeep, which allows DoS, and possibly other forms of attacks.
References
access.redhat.com/errata/RHSA-2019:3024
github.com/lodash/lodash/commit/1f8ea07746963a535385a5befc19fa687a627d2b
github.com/lodash/lodash/pull/4336
security.netapp.com/advisory/ntap-20191004-0005/
support.f5.com/csp/article/K47105354?utm_source=f5support&utm_medium=RSS
www.npmjs.com/advisories/1065
www.oracle.com/security-alerts/cpujan2021.html
www.oracle.com/security-alerts/cpuoct2020.html
Related
osv
osv
Prototype Pollution in lodash
2019-07-10 19:45:23
CVE-2019-10744
2019-07-26 00:15:11
ibm
ibm
nodejs
nodejs
Prototype Pollution
2020-05-20 01:36:49
Prototype Pollution
2019-07-15 17:22:56
githubexploit
githubexploit
Exploit for CVE-2019-10744
2020-12-01 09:18:57
thn
thn
prion
prion
Design/Logic Flaw
2019-07-26 00:15:00
cvelist
cvelist
CVE-2019-10744
2019-07-25 23:43:03
cve
cve
CVE-2019-10744
2019-07-26 00:15:11
redhatcve
redhatcve
CVE-2019-10744
2020-04-09 10:52:58
CVE-2019-10747
2020-04-07 17:03:44
ubuntucve
ubuntucve
CVE-2019-10744
2019-07-26 00:00:00
github
github
Prototype Pollution in lodash
2019-07-10 19:45:23
nessus
nessus
F5 Networks BIG-IP : Lodash library vulnerability (K47105354)
2020-04-24 00:00:00
Kibana < 6.8.2 Multiple Vulnerabilities
2020-03-05 00:00:00
Kibana 7.x < 7.2.1 Multiple Vulnerabilities
2020-03-05 00:00:00
debiancve
debiancve
CVE-2019-10744
2019-07-26 00:15:11
f5
f5
K47105354 : Lodash library vulnerability CVE-2019-10744
2019-11-13 00:00:00
nvd
nvd
CVE-2019-10744
2019-07-26 00:15:11
openvas
openvas
redhat
redhat
(RHSA-2019:3024) Moderate: ovirt-web-ui security and bug fix update
2019-10-10 14:49:46
(RHSA-2020:2362) Moderate: Red Hat OpenShift Service Mesh security update
2020-06-02 15:21:32
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00