René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"CVE-2020-8203 @ Npm-lodash-4.17.11","articleBody":"**Vulnerable Package** issue exists @ **Npm\\-lodash\\-4\\.17\\.11** in branch **main**\r\n\r\nPrototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.\r\n\r\n**Namespace:** James-AST\r\n**Repository:** msft\r\n**Repository Url:** https://github.com/James-AST/msft\r\n**CxAST\\-Project:** James-AST/msft\r\n**CxAST platform scan:** [d217bf9e\\-499c\\-4ae8\\-a115\\-08b6cd62b182](https://ast.checkmarx.net/projects/fada48c7-0c49-472a-994a-763d8a847895/scans?id=d217bf9e-499c-4ae8-a115-08b6cd62b182\u0026branch=main)\r\n**Branch:** main\r\n**Application:** msft\r\n**Severity:** HIGH\r\n**State:** NOT_IGNORED\r\n**Status:** RECURRENT\r\n**CWE:** CWE-1321\r\n\r\n\r\n----\r\n**Addition Info**\r\n**Attack vector:** NETWORK\r\n**Attack complexity:** HIGH\r\n**Confidentiality impact:** NONE\r\n**Availability impact:** HIGH\r\n**Remediation Upgrade Recommendation:** 4.17.21\r\n\r\n\r\n----\r\n**References**\r\n[Advisory](https://github.com/advisories/GHSA-p6mc-m468-83gw)\r\n[Pull request](https://github.com/lodash/lodash/pull/4759)\r\n[Commit](https://github.com/lodash/lodash/commit/c84fe82760fb2d3e03a63379b297a1cc1a2fce12)\r\n[Disclosure](https://hackerone.com/reports/712065)\r\n","author":{"url":"https://github.com/jbrotsos","@type":"Person","name":"jbrotsos"},"datePublished":"2022-06-16T16:40:04.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/50/msft/issues/50"}