Vulnerabilities > CVE-2020-8203

CVSS 7.4 - HIGH

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

HIGH

network

high complexity

lodash

oracle

NVD

Published: 2020-07-15

Updated: 2024-11-21

Summary

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

Vulnerable Configurations

Part	Description	Count
Application	Lodash Lodash Lodash 0.1.0 Lodash Lodash 0.2.0 Lodash Lodash 0.2.1 Lodash Lodash 0.2.2 Lodash Lodash 0.3.0 Lodash Lodash 0.3.1 Lodash Lodash 0.3.2 Lodash Lodash 0.4.0 Lodash Lodash 0.4.1 Lodash Lodash 0.4.2 Lodash Lodash 0.5.0 Lodash Lodash 0.5.1 Lodash Lodash 0.5.2 Lodash Lodash 0.6.0 Lodash Lodash 0.6.1 Lodash Lodash 0.7.0 Lodash Lodash 0.8.0 Lodash Lodash 0.8.1 Lodash Lodash 0.8.2 Lodash Lodash 0.9.0 Lodash Lodash 0.9.1 Lodash Lodash 0.9.2 Lodash Lodash 0.10.0 Lodash Lodash 1.0.0 Lodash Lodash 1.0.1 Lodash Lodash 1.0.2 Lodash Lodash 1.1.0 Lodash Lodash 1.1.1 Lodash Lodash 1.2.0 Lodash Lodash 1.2.1 Lodash Lodash 1.3.0 Lodash Lodash 1.3.1 Lodash Lodash 2.0.0 Lodash Lodash 2.1.0 Lodash Lodash 2.2.0 Lodash Lodash 2.2.1 Lodash Lodash 2.3.0 Lodash Lodash 2.4.0 Lodash Lodash 2.4.1 Lodash Lodash 2.4.2 Lodash Lodash 3.0.0 Lodash Lodash 3.0.1 Lodash Lodash 3.0.2 Lodash Lodash 3.0.3 Lodash Lodash 3.0.4 Lodash Lodash 3.0.5 Lodash Lodash 3.0.6 Lodash Lodash 3.0.7 Lodash Lodash 3.0.8 Lodash Lodash 3.0.9 Lodash Lodash 3.1.0 Lodash Lodash 3.1.1 Lodash Lodash 3.1.2 Lodash Lodash 3.1.3 Lodash Lodash 3.1.4 Lodash Lodash 3.1.5 Lodash Lodash 3.1.6 Lodash Lodash 3.1.7 Lodash Lodash 3.2.0 Lodash Lodash 3.2.1 Lodash Lodash 3.2.2 Lodash Lodash 3.2.3 Lodash Lodash 3.3.0 Lodash Lodash 3.3.1 Lodash Lodash 3.3.2 Lodash Lodash 3.3.3 Lodash Lodash 3.3.4 Lodash Lodash 3.3.5 Lodash Lodash 3.3.6 Lodash Lodash 3.3.7 Lodash Lodash 3.4.0 Lodash Lodash 3.4.1 Lodash Lodash 3.4.2 Lodash Lodash 3.4.3 Lodash Lodash 3.4.4 Lodash Lodash 3.5.0 Lodash Lodash 3.5.1 Lodash Lodash 3.5.2 Lodash Lodash 3.5.3 Lodash Lodash 3.6.0 Lodash Lodash 3.6.1 Lodash Lodash 3.6.2 Lodash Lodash 3.7.0 Lodash Lodash 3.7.1 Lodash Lodash 3.7.2 Lodash Lodash 3.7.3 Lodash Lodash 3.7.4 Lodash Lodash 3.8.0 Lodash Lodash 3.8.1 Lodash Lodash 3.8.2 Lodash Lodash 3.9.0 Lodash Lodash 3.9.1 Lodash Lodash 3.9.2 Lodash Lodash 3.9.3 Lodash Lodash 3.10.0 Lodash Lodash 3.10.1 Lodash Lodash 3.10.2 Lodash Lodash 3.10.3 Lodash Lodash 3.11.0 Lodash Lodash 4.0.0 Lodash Lodash 4.0.1 Lodash Lodash 4.0.2 Lodash Lodash 4.0.3 Lodash Lodash 4.0.4 Lodash Lodash 4.0.5 Lodash Lodash 4.0.6 Lodash Lodash 4.0.7 Lodash Lodash 4.0.8 Lodash Lodash 4.0.9 Lodash Lodash 4.1.0 Lodash Lodash 4.1.1 Lodash Lodash 4.1.2 Lodash Lodash 4.1.3 Lodash Lodash 4.1.4 Lodash Lodash 4.1.5 Lodash Lodash 4.2.0 Lodash Lodash 4.2.1 Lodash Lodash 4.2.2 Lodash Lodash 4.2.3 Lodash Lodash 4.2.4 Lodash Lodash 4.2.5 Lodash Lodash 4.3.0 Lodash Lodash 4.3.1 Lodash Lodash 4.3.2 Lodash Lodash 4.3.3 Lodash Lodash 4.3.4 Lodash Lodash 4.3.5 Lodash Lodash 4.4.0 Lodash Lodash 4.4.1 Lodash Lodash 4.4.2 Lodash Lodash 4.4.3 Lodash Lodash 4.5.0 Lodash Lodash 4.5.1 Lodash Lodash 4.5.2 Lodash Lodash 4.5.3 Lodash Lodash 4.5.4 Lodash Lodash 4.5.5 Lodash Lodash 4.5.6 Lodash Lodash 4.5.7 Lodash Lodash 4.6.0 Lodash Lodash 4.6.1 Lodash Lodash 4.6.2 Lodash Lodash 4.7.0 Lodash Lodash 4.7.1 Lodash Lodash 4.8.0 Lodash Lodash 4.8.1 Lodash Lodash 4.8.2 Lodash Lodash 4.9.0 Lodash Lodash 4.9.1 Lodash Lodash 4.10.0 Lodash Lodash 4.10.1 Lodash Lodash 4.10.2 Lodash Lodash 4.11.0 Lodash Lodash 4.11.1 Lodash Lodash 4.11.2 Lodash Lodash 4.12.0 Lodash Lodash 4.12.1 Lodash Lodash 4.13.0 Lodash Lodash 4.13.1 Lodash Lodash 4.14.0 Lodash Lodash 4.14.1 Lodash Lodash 4.14.2 Lodash Lodash 4.15.0 Lodash Lodash 4.16.0 Lodash Lodash 4.16.1 Lodash Lodash 4.16.2 Lodash Lodash 4.16.3 Lodash Lodash 4.16.4 Lodash Lodash 4.16.5 Lodash Lodash 4.16.6 Lodash Lodash 4.17.0 Lodash Lodash 4.17.1 Lodash Lodash 4.17.2 Lodash Lodash 4.17.3 Lodash Lodash 4.17.4 Lodash Lodash 4.17.5 Lodash Lodash 4.17.6 Lodash Lodash 4.17.7 Lodash Lodash 4.17.8 Lodash Lodash 4.17.9 Lodash Lodash 4.17.10 Lodash Lodash 4.17.11 Lodash Lodash 4.17.12 Lodash Lodash 4.17.13 Lodash Lodash 4.17.14 Lodash Lodash 4.17.15 Lodash Lodash 4.17.16 Lodash Lodash 4.17.17 Lodash Lodash 4.17.18 Lodash Lodash 4.17.19	194
Application	Oracle Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Communications Billing AND Revenue Management 12.0.0.3.0 Oracle Communications Billing AND Revenue Management 7.5.0.23.0 Oracle Enterprise Communications Broker 3.2.0 Oracle Enterprise Communications Broker Pcz3.3 Oracle Enterprise Communications Broker 3.3.0 Oracle Banking Extensibility Workbench 14.3.0 Oracle Banking Extensibility Workbench 14.2.0 Oracle Banking Extensibility Workbench 14.5.0 Oracle Banking Virtual Account Management 14.3.0 Oracle Banking Virtual Account Management 14.2.0 Oracle Banking Virtual Account Management 14.5.0 Oracle Banking Trade Finance Process Management 14.3.0 Oracle Banking Trade Finance Process Management 14.5.0 Oracle Banking Trade Finance Process Management 14.2.0 Oracle Banking Credit Facilities Process Management 14.3.0 Oracle Banking Credit Facilities Process Management 14.2.0 Oracle Banking Credit Facilities Process Management 14.5.0 Oracle Banking Corporate Lending Process Management 14.3.0 Oracle Banking Corporate Lending Process Management 14.2.0 Oracle Banking Corporate Lending Process Management 14.5.0 Oracle Primavera Gateway 17.12.0 Oracle Primavera Gateway 17.12.6 Oracle Primavera Gateway 17.12.7 Oracle Primavera Gateway 17.12.8 Oracle Primavera Gateway 17.12.9 Oracle Primavera Gateway 17.12.10 Oracle Primavera Gateway 17.12.11 Oracle Primavera Gateway 20.12.0 Oracle Primavera Gateway 20.12.7 Oracle Primavera Gateway 19.12.0 Oracle Primavera Gateway 19.12.4 Oracle Primavera Gateway 19.12.10 Oracle Primavera Gateway 19.12.11 Oracle Primavera Gateway 18.8.0 Oracle Primavera Gateway 18.8.8 Oracle Primavera Gateway 18.8.8.1 Oracle Primavera Gateway 18.8.9 Oracle Primavera Gateway 18.8.11 Oracle Primavera Gateway 18.8.12 Oracle Communications Subscriber Aware Load Balancer Cz8.3 Oracle Communications Subscriber Aware Load Balancer Cz8.4 Oracle Communications Session Router Cz8.4 Oracle Communications Session Border Controller Cz8.4 Oracle Communications Session Border Controller 8.4 Oracle Communications Session Border Controller 9.0 Oracle Banking Supply Chain Finance 14.2.0 Oracle Banking Supply Chain Finance 14.5.0 Oracle Banking Supply Chain Finance 14.3.0 Oracle Communications Cloud Native Core Policy 1.11.0 Oracle Banking Liquidity Management 14.2.0 Oracle Banking Liquidity Management 14.5.0 Oracle Banking Liquidity Management 14.3.0 Oracle JD Edwards Enterpriseone Tools - Oracle JD Edwards Enterpriseone Tools 4.0.1.0 Oracle JD Edwards Enterpriseone Tools 9.1 Oracle JD Edwards Enterpriseone Tools 9.1.5 Oracle JD Edwards Enterpriseone Tools 9.2 Oracle JD Edwards Enterpriseone Tools 9.2.4.0 Oracle JD Edwards Enterpriseone Tools 9.2.4.2 Oracle JD Edwards Enterpriseone Tools 9.2.5.0 Oracle JD Edwards Enterpriseone Tools 9.2.5.3 Oracle JD Edwards Enterpriseone Tools 9.2.6.0 Oracle Blockchain Platform - Oracle Blockchain Platform 21.1.2	66

Vulnerabilities > CVE-2020-8203 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-8203"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-8203