CVE-2021-23337
ADVISORY - githubSummary
lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.
EPSS Score: 0.00859 (0.740)
Common Weakness Enumeration (CWE)
ADVISORY - nist
Improper Control of Generation of Code ('Code Injection')
ADVISORY - github
ADVISORY - gitlab
OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
Improper Neutralization of Special Elements used in a Command ('Command Injection')
OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
Improper Control of Generation of Code ('Code Injection')
ADVISORY - redhat
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
NIST
CREATED
UPDATED
ADVISORY IDCVE-2021-23337
EXPLOITABILITY SCORE
1.2
EXPLOITS FOUND
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
7.2highGitHub
CVSS SCORE
7.2highDebian
CREATED
UPDATED
ADVISORY IDCVE-2021-23337
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Ubuntu
CREATED
UPDATED
ADVISORY IDCVE-2021-23337
EXPLOITABILITY SCORE
1.2
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
7.2mediumRed Hat
CREATED
UPDATED
ADVISORY IDCVE-2021-23337
EXPLOITABILITY SCORE
1.2
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
7.2mediumintheWild
CREATED
UPDATED
ADVISORY IDCVE-2021-23337
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-