ورود / ثبت‌نام

جزئیات آسیب‌پذیری

CVE-2026-4800

Red Hat Confidential Compute AttestationRed Hat Cryostat 4Red Hat Logging Subsystem for Red Hat OpenShiftRed Hat Migration Toolkit for Applications 8Red Hat Node HealthCheck OperatorRed Hat OpenShift Lightspeed

lodash vulnerable to Code Injection via `_.template` imports key names

CVSS 3.1
8.1بالا

شرح رسمی (انگلیسی)

The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names, and both paths flow into the same Function() constructor sink. When an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in, so if Object.prototype has been polluted by another vector the polluted keys are copied into the imports object and passed to Function(). The issue is fixed in 4.18.1 for lodash, lodash-es, lodash-amd, and lodash.template. As a workaround, do not pass untrusted input as key names in options.imports; use only developer-controlled, static key names.

امتیازهای CVSS

امتیازنسخهمنبعبردار
8.1بالا 3.1 CVEProject cvelistV5 (CNA) (openjs) CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
8.1بالا 3.1 CVEProject cvelistV5 (CNA) (redhat-SADP) CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Red Hat Confidential Compute Attestation همه CVEProject cvelistV5 (CNA)
Red Hat Cryostat 4 همه CVEProject cvelistV5 (CNA)
Red Hat Logging Subsystem for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat Logging Subsystem for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat Logging Subsystem for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat Logging Subsystem for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat Logging Subsystem for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat Logging Subsystem for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat Logging Subsystem for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat Logging Subsystem for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat Logging Subsystem for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat Logging Subsystem for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat Logging Subsystem for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat Logging Subsystem for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat Logging Subsystem for Red Hat OpenShift همه CVEProject cvelistV5 (CNA)
Red Hat Migration Toolkit for Applications 8 همه CVEProject cvelistV5 (CNA)
Red Hat Node HealthCheck Operator همه CVEProject cvelistV5 (CNA)
Red Hat Node HealthCheck Operator همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Lightspeed همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Lightspeed همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Pipelines همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Pipelines همه CVEProject cvelistV5 (CNA)
Red Hat OpenShift Pipelines همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Security 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ansible Automation Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ansible Automation Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ansible Automation Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ansible Automation Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Ansible Automation Platform 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Build of Keycloak همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Build of Podman Desktop همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Build of Podman Desktop همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Connectivity Link 1 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Developer Hub همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Discovery 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 8 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 8 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 8 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 8 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Fuse 7 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat JBoss Enterprise Application Platform 7 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Dev Spaces همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift GitOps همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift GitOps همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Virtualization 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Process Automation 7 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Satellite 6 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Single Sign-On 7 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat Trusted Profile Analyzer همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat build of Apache Camel - HawtIO 4 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat build of Apicurio Registry 2 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat build of Apicurio Registry 3 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat build of Apicurio Registry 3 همه CVEProject cvelistV5 (CNA)
Red Hat Red Hat build of Apicurio Registry 3 همه CVEProject cvelistV5 (CNA)
Red Hat Self-service automation portal 2 همه CVEProject cvelistV5 (CNA)
lodash lodash 4.0.0 ≤ v < 4.18.1 CVEProject cvelistV5 (CNA)
lodash lodash-amd 4.0.0 ≤ v < 4.18.1 CVEProject cvelistV5 (CNA)
lodash lodash-es 4.0.0 ≤ v < 4.18.1 CVEProject cvelistV5 (CNA)
lodash lodash.template 4.0.0 ≤ v < 4.18.1 CVEProject cvelistV5 (CNA)

منابع و راهنماها

۸۰
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۵/۰۱/۱۱
آخرین به‌روزرسانی
۱۴۰۵/۰۷/۲۳
وضعیت
منتشرشده
صادرکننده (CNA)
openjs

پیش‌بینی بهره‌برداری (EPSS)

۲٫۸٪
احتمال بهره‌برداری در ۳۰ روز
۸۶٫۵٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
خیر
وضعیت بهره‌برداری
ندارد
اثر فنی
کامل

ضعف‌ها (CWE)

  • CWE-94
    Improper Control of Generation of Code ('Code Injection')