CVE-2021-23337 Command Injection
PublishedLodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.
Product
2 published CVES affecting netapp system manager, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.
lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaultsDeep, merge, and mergeWith functions, which allows a malicious user to modify the prototype of "Object" via proto, causing the addition or modification of an ex...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.