ghsa-3cqr-58rm-57f8
Vulnerability from github
Published
2022-02-10 20:38
Modified
2021-04-22 23:38
Severity
Summary
Arbitrary Code Execution in Handlebars
Details
Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim's browser (effectively serving as XSS).
{
"affected": [
{
"ecosystem_specific": {
"affected_functions": [
"(handlebars).helpers.lookup"
]
},
"package": {
"ecosystem": "npm",
"name": "handlebars"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.0.8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"ecosystem_specific": {
"affected_functions": [
"(handlebars).helpers.lookup"
]
},
"package": {
"ecosystem": "npm",
"name": "handlebars"
},
"ranges": [
{
"events": [
{
"introduced": "4.0.0"
},
{
"fixed": "4.5.3"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2019-20920"
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"github_reviewed": true,
"github_reviewed_at": "2021-04-22T23:38:32Z",
"nvd_published_at": "2020-09-30T18:15:00Z",
"severity": "HIGH"
},
"details": "Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim\u0027s browser (effectively serving as XSS).",
"id": "GHSA-3cqr-58rm-57f8",
"modified": "2021-04-22T23:38:32Z",
"published": "2022-02-10T20:38:19Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20920"
},
{
"type": "WEB",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/156061eb7707575293613d7fdf90e2bdaac029ee"
},
{
"type": "WEB",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/d54137810a49939fd2ad01a91a34e182ece4528e"
},
{
"type": "WEB",
"url": "https://snyk.io/vuln/SNYK-JS-HANDLEBARS-534478"
},
{
"type": "WEB",
"url": "https://www.npmjs.com/advisories/1316"
},
{
"type": "WEB",
"url": "https://www.npmjs.com/advisories/1324"
},
{
"type": "WEB",
"url": "https://www.npmjs.com/package/handlebars"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:L",
"type": "CVSS_V3"
}
],
"summary": "Arbitrary Code Execution in Handlebars"
}
Loading...