CVE:CVE-2020-7712
CNNVD:CNNVD-202008-1430
joyent json是个人开发者的一款用 Javascript 编写的 json 解析器。
json包的10.0.0之前版本存在安全漏洞，攻击者可以使用parseLookup函数注入任意命令。
solution:Upgrade joyent json to a higher version than 10.0.0,and avoid the version (,10.0.0); Upgrade oracle commerce_guided_search to a higher version than 11.3.2,and avoid the version 11.3.2; Upgrade oracle financial_services_crime_and_compliance_management_studio to a higher version than 8.0.8.2.0,8.0.8.3.0,and avoid the version 8.0.8.2.0,8.0.8.3.0; Upgrade oracle financial_services_regulatory_reporting_with_agilereporter to a higher version than 8.0.9.6.3,and avoid the version 8.0.9.6.3; Upgrade oracle timesten_in-memory_database to a higher version than 21.1.1.1.0,and avoid the version (,21.1.1.1.0)