lodash lodash CVE-2020-8203 in Lodash and Oracle Products
Published on July 15, 2020

product logo product logo
Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

NVD

Weakness Type

Allocation of Resources Without Limits or Throttling

The software allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.


Products Associated with CVE-2020-8203

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2020-8203 are published in these products:

Lodash
 
Oracle Banking Corporate Lending Process Management
 
Oracle Banking Credit Facilities Process Management
 
Oracle Banking Extensibility Workbench
 
Oracle Banking Liquidity Management
 
Oracle Banking Supply Chain Finance
 
Oracle Banking Trade Finance Process Management
 
Oracle Banking Virtual Account Management
 
Oracle Communications Billing Revenue Management
 
Oracle Communications Cloud Native Core Policy
 
Oracle Communications Session Border Controller
 
Oracle Communications Session Router
 
Oracle Communications Subscriber Aware Load Balancer
 
Oracle Enterprise Communications Broker
 
Oracle Jd Edwards Enterpriseone Tools
 
Oracle Primavera Gateway
 
Oracle Peoplesoft Enterprise Peopletools
 
Oracle Blockchain Platform
 

Exploit Probability

EPSS
3.36%
Percentile
86.92%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.