● CVE — Critical
CVE-2019-10744
Vendorlodash, netapp, f5, redhat, oracleProductlodash, active iq unified manager, big-ip advanced firewall manager, big-ip policy enforcement manager, service level manager, big-ip access policy manager, big-ip analytics, big-ip application acceleration manager, big-ip application security manager, big-ip link controller, big-ip local traffic manager, big-ip edge gateway, big-ip global traffic manager, big-ip webaccelerator, big-iq centralized management, big-ip domain name system, virtualization manager, big-ip fraud protection service, iworkflow, big-ip application visibility and reporting, banking extensibility workbenchDiscoveredJul 26, 2019UpdatedNov 21, 2024
Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.