handlebars.js project handlebars.js 4.0.0 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

Versions of handlebars before 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties, which may allow an malicious user to execute arbitrary code through crafted payloads.

Handlebars.js Project Handlebars.js 1.0.6 Handlebars.js Project Handlebars.js 1.0.7 Handlebars.js Project Handlebars.js 1.0.8 Handlebars.js Project Handlebars.js 1.0.9 Handlebars.js Project Handlebars.js 1.0.10 Handlebars.js Project Handlebars.js 1.0.11 Handlebars.js Project Handlebars.js 1.0.12 Handlebars.js Project Handlebars.js 1.1.0 Handlebars.js Project Handlebars.js 1.1.1 Handlebars.js Project Handlebars.js 1.1.2 Handlebars.js Project Handlebars.js 1.2.0 Handlebars.js Project Handlebars.js 1.2.1 Handlebars.js Project Handlebars.js 1.3.0 Handlebars.js Project Handlebars.js 2.0.0 Handlebars.js Project Handlebars.js 3.0.0 Handlebars.js Project Handlebars.js 3.0.1 Handlebars.js Project Handlebars.js 3.0.2 Handlebars.js Project Handlebars.js 3.0.3 Handlebars.js Project Handlebars.js 4.0.0 Handlebars.js Project Handlebars.js 4.0.1 Handlebars.js Project Handlebars.js 4.0.2 Handlebars.js Project Handlebars.js 4.0.3

4.3

CVSSv2

The handlebars package prior to 4.0.0 for Node.js allows remote malicious users to conduct cross-site scripting (XSS) attacks by leveraging a template with an attribute that is not quoted.

Handlebars.js Project Handlebars.js

1 Github repository

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook