Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Cx0b414307-5d4b @ Npm-lodash-4.17.11 #57

Open
jbrotsos opened this issue Jun 16, 2022 · 0 comments
Open

Cx0b414307-5d4b @ Npm-lodash-4.17.11 #57

jbrotsos opened this issue Jun 16, 2022 · 0 comments
Labels
branch:main Checkmarx CxSCA

Comments

@jbrotsos
Copy link
Contributor

jbrotsos commented Jun 16, 2022 •
edited
Loading

Vulnerable Package issue exists @ Npm-lodash-4.17.11 in branch main

Prototype Pollution vulnerability in lodash before 4.17.19.

Namespace: James-AST
Repository: msft
Repository Url: https://github.com/James-AST/msft
CxAST-Project: James-AST/msft
CxAST platform scan: d217bf9e-499c-4ae8-a115-08b6cd62b182
Branch: main
Application: msft
Severity: HIGH
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-1321

Addition Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: LOW
Availability impact: LOW
Remediation Upgrade Recommendation: 4.17.21

References
Disclosure
# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees
No one assigned
Labels
branch:main Checkmarx CxSCA
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@jbrotsos