CVE-2021-23337

Fixed in a distro release EPSS 21%CVSS 7.2

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

Published 2021-02-15 · CVE record · OSV

Products: lodash, oracle banking_corporate_lending_process_management, oracle banking_credit_facilities_process_management, oracle banking_extensibility_workbench, oracle banking_supply_chain_finance, oracle banking_trade_finance_process_management, oracle communications_cloud_native_core_binding_support_function, oracle communications_cloud_native_core_policy, oracle communications_design_studio, oracle communications_services_gatekeeper, oracle communications_session_border_controller, oracle enterprise_communications_broker, oracle financial_services_crime_and_compliance_management_studio, oracle health_sciences_data_management_workbench, oracle jd_edwards_enterpriseone_tools, oracle peoplesoft_enterprise_peopletools, oracle primavera_gateway, oracle primavera_unifier, oracle retail_customer_management_and_segmentation_foundation, netapp active_iq_unified_manager, netapp cloud_manager, netapp system_manager, siemens sinec_ins

Fixed upstream

Distro releases