CVE-2020-28500

Name: Websites susceptible to CVE-2020-28500
Creator: WebTechSurvey

Regular Expression Denial of Service (ReDoS)

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.

We have discovered 581,995 live websites that are affected by CVE-2020-28500.


Product	Lodash
Category	JavaScript Libraries
Vulnerable Domains	581,995 live websites (37% of Lodash install base)
Vulnerable Versions	from 4.17.21 through 4.17.21
Vulnerable Versions Count	1 versions ( 2.44% of all versions)

Number of websites using CVE-2020-28500

Number of websites using CVE-2020-28500

Vulnerable versions are highlighted in red

Top websites that are affected by CVE-2020-28500. Please click on the "Contact us" link to get more information.

Domain	Country	Rank
*****.com	United States	***
*.*.edu	United States	,**
************.com	China	,**
*************.uk	United States	,**
***.org	United States	,**
*******.org	United States	,**
***.*.cn	United States	,**
*********.com	United States	,**
********.ru	Russia	,**
**.*****.edu	United States	,**

FAQ

A total of 581,995 websites have been identified as vulnerable to CVE-2020-28500, based on global website indexing conducted by WebTechSurvey.

The Lodash is affected by the CVE-2020-28500 vulnerability.

Lodash versions up to and including 4.17.21 are vulnerable to CVE-2020-28500.