CVE-2020-8203

CVSS: 7.4 High
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
Risk score: 59.2
Published: 2020-07-15
Status: Modified

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

Weaknesses

CWE-770CWE-1321

Coverage 1

threat-intel

Multiples vulnérabilités dans les produits IBM (17 juillet 2026)

Multiple vulnerabilities have been discovered in IBM products, including remote code execution, privilege escalation, and denial-of-service vulnerabilities. Several CVEs have been assigned, covering a wide range of IBM p…

CERT-FR · Jul 17, 2026 High

CVE-2020-28500 CVE-2020-7760 CVE-2020-8203 vulnerability supply-chain remote-code-execution

All articles mentioning it

Advisories and references

github.com/lodash/lodash/issues/4874
hackerone.com/reports/712065
security.netapp.com/advisory/ntap-20200724-0006/
oracle.com//security-alerts/cpujul2021.html
oracle.com/security-alerts/cpuApr2021.html
oracle.com/security-alerts/cpuapr2022.html
oracle.com/security-alerts/cpujan2022.html
oracle.com/security-alerts/cpuoct2021.html
github.com/lodash/lodash/issues/4874
hackerone.com/reports/712065

news.mlab.sh

CVE-2020-8203

Weaknesses

Coverage 1

Multiples vulnérabilités dans les produits IBM (17 juillet 2026)

Advisories and references