CVE:CVE-2021-23358
CNNVD:CNNVD-202103-1621
Npm underscore是美国Npm公司的一个应用程序。一个JavaScript的实用程序带库，可为常见的可疑功能提供支持，而无需扩展任何核心JavaScript对象。
underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1存在代码注入漏洞，攻击者可利用该漏洞容易通过模板函数执行任意代码。
solution:Upgrade underscorejs underscore to a higher version than 1.12.1,1.13.0-2,and avoid the version [1.3.2,1.12.1),[1.13.0-0,1.13.0-2); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade tenable tenable.sc to a higher version than 5.18.0,and avoid the version (,5.18.0]; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34