CVE-2020-8203

7.4
HIGHCVSS v3.1 Base Score
5.21%
LOW RiskEPSS (92nd percentile)
CWE-770

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

Published: 7/15/2020
Modified: 6/17/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v3 Score

7.4HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

CVSS v2 Score

5.8

AV:N/AC:M/Au:N/C:N/I:P/A:P

EPSS Score (Exploitation Probability)

5.21%LOW Exploitation Risk
92nd percentile

This vulnerability has a 5.21% probability of being exploited in the next 30 days, ranking higher than 92% of all scored CVEs.

CWE Classification

CWE-770

Learn More

CVSS Calculator

View this score breakdown or calculate a custom score

Understanding CVSS Scoring

Learn how severity scores are calculated and what they mean

CVE Prioritization Guide

Best practices for deciding which vulnerabilities to address first

What is a CVE?

Essential guide to Common Vulnerabilities and Exposures

CVE vs CWE Explained

Understand how CVEs relate to underlying weakness types

Advertisement