CVE-2021-23358
ADVISORY - githubSummary
The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Execution via the template function, particularly when a variable property is passed as an argument as it is not sanitized.
EPSS Score: 0.00968 (0.756)
Common Weakness Enumeration (CWE)
ADVISORY - nist
Improper Control of Generation of Code ('Code Injection')
ADVISORY - github
Improper Control of Generation of Code ('Code Injection')
ADVISORY - gitlab
ADVISORY - redhat
Improper Control of Generation of Code ('Code Injection')
NIST
CREATED
UPDATED
ADVISORY IDCVE-2021-23358
EXPLOITABILITY SCORE
0.7
EXPLOITS FOUND
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
3.3lowGitHub
CREATED
UPDATED
ADVISORY IDGHSA-cf4h-3jhx-xvhq
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
9.8criticalDebian
CREATED
UPDATED
ADVISORY IDCVE-2021-23358
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Ubuntu
CREATED
UPDATED
ADVISORY IDCVE-2021-23358
EXPLOITABILITY SCORE
1.2
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
7.2mediumRed Hat
CREATED
UPDATED
ADVISORY IDCVE-2021-23358
EXPLOITABILITY SCORE
1.2
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
7.2highintheWild
CREATED
UPDATED
ADVISORY IDCVE-2021-23358
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-