60
CVE-2019-10744
PoC —CVSS 3.1
9.1 critical
EPSS
5%p92
Published
()
Modified
Description
Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.
- Vendors
- lodashnetappredhatoraclef5
- Products
- lodash, active iq unified manager, service level manager, virtualization manager, banking extensibility workbench, big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics, big-ip application acceleration manager, big-ip application security manager, big-ip application visibility and reporting, big-ip domain name system
- Weakness
- CWE-1321
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H