NetSight
IP …
medium5.3

CVE-2020-28500

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.

Impact

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.

Affected products

VendorProductAffected versions
LodashLodash
before 4.17.21
OracleBanking Corporate Lending Process Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Credit Facilities Process Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Extensibility Workbench
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Supply Chain Finance
Versions 14.2.0, 14.3.0, 14.5.0
OracleBanking Trade Finance Process Management
Versions 14.2.0, 14.3.0, 14.5.0
OracleCommunications Cloud Native Core Policy
Version 1.11.0
OracleCommunications Design Studio
Version 7.4.2
OracleCommunications Services Gatekeeper
Version 7.0
OracleCommunications Session Border Controller
Versions 8.4, 9.0
OracleEnterprise Communications Broker
Versions 3.2.0, 3.3.0
OracleFinancial Services Crime And Compliance Management Studio
Versions 8.0.8.2.0, 8.0.8.3.0

References