Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2020-8203

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

VectorNETWORK

PublishedJul 15, 2020, 17:15

Published Bysupport@hackerone.com

Base Score

Score7.4

Package (Ecosystem)IntroducedFixedLimit

lodash(npm)3.7.04.17.19N/A

lodash-es(npm)3.7.04.17.20N/A

lodash.pick(npm)4.0.0N/AN/A

lodash.set(npm)3.7.0N/AN/A

lodash.setwith(npm)0N/AN/A

lodash.update(npm)0N/AN/A

lodash.updatewith(npm)0N/AN/A

lodash-rails(RubyGems)3.7.04.17.19N/A

CWE-1321

Base Score

7.4

Vector String

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK