CVE-2021-23337

Description

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

Base Score

7.2

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.517

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Netapp Active Iq Unified Manager 2.3	Windows
Multiple vulnerabilities are affected in Oracle PeopleSoft Enterprise PeopleTools 8.58	Windows
Multiple vulnerabilities are affected in Oracle PeopleSoft Enterprise PeopleTools 8.59	Windows
Multiple Vulnerabilities are affected in IBM WebMethods Integration Server 10.15	Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.1	Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.2	Windows
Multiple Vulnerabilities are affected in IBM WebMethods Integration Server 10.11	Windows
Multiple Vulnerabilities are affected in IBM WebMethods Integration Server 11.1	Windows
Vulnerabilities CVE-2021-23337 are fixed in Ruby-lodash-rails 4.17.21	Windows
Multiple Vulnerabilities are affected in IBM Aspera Faspex 5.0.15	Windows
Multiple Vulnerabilities are affected in IBM App Connect Enterprise 12.0.12.24	Windows
Multiple Vulnerabilities are affected in IBM App Connect Enterprise 13.0.7.0	Windows
Vulnerabilities CVE-2021-23337 are fixed in Ruby-lodash-rails for Linux 4.17.21	Linux
Improper Control of Generation of Code (Code Injection) Vulnerability (CVE-2021-23337)	NCM

No records found