CVE-2021-23337
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.
- Score
- CVSS 3.1 7.2 High
- Status
- Modified - report@snyk.io
- Published
- 2021-02-15
- Last modified
- 2026-10-08
- Weaknesses
- CWE-94
Affected products
- Lodash (Lodash)
- Active Iq Unified Manager (Netapp)
- Cloud Manager (Netapp)
- System Manager (Netapp)
- Banking Corporate Lending Process Management (Oracle)
- Banking Credit Facilities Process Management (Oracle)
- Banking Extensibility Workbench (Oracle)
- Banking Supply Chain Finance (Oracle)
- Banking Trade Finance Process Management (Oracle)
- Communications Cloud Native Core Binding Support Function (Oracle)
- Communications Cloud Native Core Policy (Oracle)
- Communications Design Studio (Oracle)
- Communications Services Gatekeeper (Oracle)
- Communications Session Border Controller (Oracle)
- Enterprise Communications Broker (Oracle)
- Financial Services Crime And Compliance Management Studio (Oracle)
- Health Sciences Data Management Workbench (Oracle)
- Jd Edwards Enterpriseone Tools (Oracle)
- Peoplesoft Enterprise Peopletools (Oracle)
- Primavera Gateway (Oracle)
- Primavera Unifier (Oracle)
- Retail Customer Management And Segmentation Foundation (Oracle)
- Sinec Ins (Siemens)
References
- https://snyk.io/vuln/SNYK-JS-LODASH-1040724
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074928
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074929
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074930
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBLODASH-1074931
- https://snyk.io/vuln/SNYK-JAVA-ORGFUJIONWEBJARS-1074932
- https://github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.js%23L14851
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://security.netapp.com/advisory/ntap-20210312-0006/
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
