Published: 30/09/2020 Updated: 21/07/2021

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Handlebars prior to 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be forced into an endless loop while processing crafted templates. This may allow malicious users to exhaust system resources.

Vulnerable Product	Search on Vulmon	Subscribe to Product
handlebarsjs handlebars

Synopsis Low: Red Hat Virtualization security, bug fix, and enhancement update Type/Severity Security Advisory: Low Topic An update is now available for Red Hat Virtualization Engine 44Red Hat Product Security has rated this update as having a security impact of Low A Common Vulnerability Scoring System ...

Synopsis Critical: Red Hat Process Automation Manager 7132 security update Type/Severity Security Advisory: Critical Topic An update is now available for Red Hat Process Automation ManagerRed Hat Product Security has rated this update as having a security impact of Critical A Common Vulnerability Scoring System (CVSS) base score, which gi ...

CWE-400 https://github.com/handlebars-lang/handlebars.js/commit/8d5530ee2c3ea9f0aee3fde310b9f36887d00b8b https://snyk.io/vuln/SNYK-JS-HANDLEBARS-480388 https://www.npmjs.com/advisories/1300 https://access.redhat.com/errata/RHSA-2020:5179 https://nvd.nist.gov

CVE-2019-20922

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect