CVE:CVE-2021-23337
CNNVD:CNNVD-202102-1137
lodash是一款开源的JavaScript实用程序库。
lodash 中存在代码注入漏洞，该漏洞源于外部输入数据构造可执行命令过程中，网络系统或产品未正确过滤其中的特殊元素。攻击者可利用该漏洞执行非法命令。
solution:Upgrade lodash lodash to a higher version than 4.17.21,and avoid the version (,4.17.21); Upgrade oracle banking_corporate_lending_process_management to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle banking_credit_facilities_process_management to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle banking_extensibility_workbench to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle banking_supply_chain_finance to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle banking_trade_finance_process_management to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle communications_cloud_native_core_binding_support_function to a higher version than 1.9.0,and avoid the version 1.9.0; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.11.0,and avoid the version 1.11.0; Upgrade oracle communications_design_studio to a higher version than 7.4.2.0.0,and avoid the version 7.4.2.0.0; Upgrade oracle communications_services_gatekeeper to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle communications_session_border_controller to a higher version than 8.4,9.0,and avoid the version 8.4,9.0; Upgrade oracle enterprise_communications_broker to a higher version than 3.2.0,3.3.0,and avoid the version 3.2.0,3.3.0; Upgrade oracle financial_services_crime_and_compliance_management_studio to a higher version than 8.0.8.2.0,8.0.8.3.0,and avoid the version 8.0.8.2.0,8.0.8.3.0; Upgrade oracle health_sciences_data_management_workbench to a higher version than 2.5.2.1,3.0.0.0,and avoid the version 2.5.2.1,3.0.0.0; Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2.6.1,and avoid the version (,9.2.6.1); Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.58,8.59,and avoid the version 8.58,8.59; Upgrade oracle primavera_gateway to a higher version than 17.12.11,18.8.12,19.12.11,20.12.7,and avoid the version [17.12.0,17.12.11],[18.8.0,18.8.12],[19.12.0,19.12.11],[20.12.0,20.12.7]; Upgrade oracle primavera_unifier to a higher version than 17.12,18.8,19.12,20.12,and avoid the version [17.7,17.12],18.8,19.12,20.12; Upgrade oracle retail_customer_management_and_segmentation_foundation to a higher version than 19.0,and avoid the version 19.0; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp cloud_manager to a higher version than -; Upgrade netapp system_manager to a higher version than 9.0,and avoid the version 9.0; Upgrade siemens sinec_ins to a higher version than 1.0,1.0,1.0:sp1,and avoid the version (,1.0),1.0,1.0:sp1