Vulnerabilities > CVE-2018-3721

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

lodash

netapp

NVD

Published: 2018-06-07

Updated: 2024-02-16

Summary

lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaultsDeep, merge, and mergeWith functions, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.

Vulnerable Configurations

Part	Description	Count
Application	Lodash Lodash Lodash 0.1.0 Lodash Lodash 0.2.0 Lodash Lodash 0.2.1 Lodash Lodash 0.2.2 Lodash Lodash 0.3.0 Lodash Lodash 0.3.1 Lodash Lodash 0.3.2 Lodash Lodash 0.4.0 Lodash Lodash 0.4.1 Lodash Lodash 0.4.2 Lodash Lodash 0.5.0 Lodash Lodash 0.5.1 Lodash Lodash 0.5.2 Lodash Lodash 0.6.0 Lodash Lodash 0.6.1 Lodash Lodash 0.7.0 Lodash Lodash 0.8.0 Lodash Lodash 0.8.1 Lodash Lodash 0.8.2 Lodash Lodash 0.9.0 Lodash Lodash 0.9.1 Lodash Lodash 0.9.2 Lodash Lodash 0.10.0 Lodash Lodash 1.0.0 Lodash Lodash 1.0.1 Lodash Lodash 1.0.2 Lodash Lodash 1.1.0 Lodash Lodash 1.1.1 Lodash Lodash 1.2.0 Lodash Lodash 1.2.1 Lodash Lodash 1.3.0 Lodash Lodash 1.3.1 Lodash Lodash 2.0.0 Lodash Lodash 2.1.0 Lodash Lodash 2.2.0 Lodash Lodash 2.2.1 Lodash Lodash 2.3.0 Lodash Lodash 2.4.0 Lodash Lodash 2.4.1 Lodash Lodash 2.4.2 Lodash Lodash 3.0.0 Lodash Lodash 3.0.1 Lodash Lodash 3.0.2 Lodash Lodash 3.0.3 Lodash Lodash 3.0.4 Lodash Lodash 3.0.5 Lodash Lodash 3.0.6 Lodash Lodash 3.0.7 Lodash Lodash 3.0.8 Lodash Lodash 3.0.9 Lodash Lodash 3.1.0 Lodash Lodash 3.1.1 Lodash Lodash 3.1.2 Lodash Lodash 3.1.3 Lodash Lodash 3.1.4 Lodash Lodash 3.1.5 Lodash Lodash 3.1.6 Lodash Lodash 3.1.7 Lodash Lodash 3.2.0 Lodash Lodash 3.2.1 Lodash Lodash 3.2.2 Lodash Lodash 3.2.3 Lodash Lodash 3.3.0 Lodash Lodash 3.3.1 Lodash Lodash 3.3.2 Lodash Lodash 3.3.3 Lodash Lodash 3.3.4 Lodash Lodash 3.3.5 Lodash Lodash 3.3.6 Lodash Lodash 3.3.7 Lodash Lodash 3.4.0 Lodash Lodash 3.4.1 Lodash Lodash 3.4.2 Lodash Lodash 3.4.3 Lodash Lodash 3.4.4 Lodash Lodash 3.5.0 Lodash Lodash 3.5.1 Lodash Lodash 3.5.2 Lodash Lodash 3.5.3 Lodash Lodash 3.6.0 Lodash Lodash 3.6.1 Lodash Lodash 3.6.2 Lodash Lodash 3.7.0 Lodash Lodash 3.7.1 Lodash Lodash 3.7.2 Lodash Lodash 3.7.3 Lodash Lodash 3.7.4 Lodash Lodash 3.8.0 Lodash Lodash 3.8.1 Lodash Lodash 3.8.2 Lodash Lodash 3.9.0 Lodash Lodash 3.9.1 Lodash Lodash 3.9.2 Lodash Lodash 3.9.3 Lodash Lodash 3.10.0 Lodash Lodash 3.10.1 Lodash Lodash 3.10.2 Lodash Lodash 3.10.3 Lodash Lodash 3.11.0 Lodash Lodash 4.0.0 Lodash Lodash 4.0.1 Lodash Lodash 4.0.2 Lodash Lodash 4.0.3 Lodash Lodash 4.0.4 Lodash Lodash 4.0.5 Lodash Lodash 4.0.6 Lodash Lodash 4.0.7 Lodash Lodash 4.0.8 Lodash Lodash 4.0.9 Lodash Lodash 4.1.0 Lodash Lodash 4.1.1 Lodash Lodash 4.1.2 Lodash Lodash 4.1.3 Lodash Lodash 4.1.4 Lodash Lodash 4.1.5 Lodash Lodash 4.2.0 Lodash Lodash 4.2.1 Lodash Lodash 4.2.2 Lodash Lodash 4.2.3 Lodash Lodash 4.2.4 Lodash Lodash 4.2.5 Lodash Lodash 4.3.0 Lodash Lodash 4.3.1 Lodash Lodash 4.3.2 Lodash Lodash 4.3.3 Lodash Lodash 4.3.4 Lodash Lodash 4.3.5 Lodash Lodash 4.4.0 Lodash Lodash 4.4.1 Lodash Lodash 4.4.2 Lodash Lodash 4.4.3 Lodash Lodash 4.5.0 Lodash Lodash 4.5.1 Lodash Lodash 4.5.2 Lodash Lodash 4.5.3 Lodash Lodash 4.5.4 Lodash Lodash 4.5.5 Lodash Lodash 4.5.6 Lodash Lodash 4.5.7 Lodash Lodash 4.6.0 Lodash Lodash 4.6.1 Lodash Lodash 4.6.2 Lodash Lodash 4.7.0 Lodash Lodash 4.7.1 Lodash Lodash 4.8.0 Lodash Lodash 4.8.1 Lodash Lodash 4.8.2 Lodash Lodash 4.9.0 Lodash Lodash 4.9.1 Lodash Lodash 4.10.0 Lodash Lodash 4.10.1 Lodash Lodash 4.10.2 Lodash Lodash 4.11.0 Lodash Lodash 4.11.1 Lodash Lodash 4.11.2 Lodash Lodash 4.12.0 Lodash Lodash 4.12.1 Lodash Lodash 4.13.0 Lodash Lodash 4.13.1 Lodash Lodash 4.14.0 Lodash Lodash 4.14.1 Lodash Lodash 4.14.2 Lodash Lodash 4.15.0 Lodash Lodash 4.16.0 Lodash Lodash 4.16.1 Lodash Lodash 4.16.2 Lodash Lodash 4.16.3 Lodash Lodash 4.16.4 Lodash Lodash 4.16.5 Lodash Lodash 4.16.6 Lodash Lodash 4.17.0 Lodash Lodash 4.17.1 Lodash Lodash 4.17.2 Lodash Lodash 4.17.3 Lodash Lodash 4.17.4	179
Application	Netapp Netapp Active IQ Unified Manager - Netapp System Manager 9.0	4

Vulnerabilities > CVE-2018-3721 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2018-3721"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2018-3721