GHSA-3cqr-58rm-57f8

Source

https://github.com/advisories/GHSA-3cqr-58rm-57f8

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-3cqr-58rm-57f8/GHSA-3cqr-58rm-57f8.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-3cqr-58rm-57f8

Aliases

CVE-2019-20920
SNYK-JS-HANDLEBARS-534478

Related

Published

2022-02-10T20:38:19Z

Modified

2024-08-01T09:11:47.615922Z

Severity

8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:L CVSS Calculator

Summary

Arbitrary Code Execution in Handlebars

Details

Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim's browser (effectively serving as XSS).

Database specific

{
    "nvd_published_at": "2020-09-30T18:15:00Z",
    "cwe_ids": [
        "CWE-94"
    ],
    "severity": "HIGH",
    "github_reviewed": true,
    "github_reviewed_at": "2021-04-22T23:38:32Z"
}

References

Affected packages

npm / handlebars

Package

Name: handlebars; View open source insights on deps.dev
Purl: pkg:npm/handlebars

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.0.8

Ecosystem specific

{
    "affected_functions": [
        "(handlebars).helpers.lookup"
    ]
}

npm / handlebars

Package

Name: handlebars; View open source insights on deps.dev
Purl: pkg:npm/handlebars

Affected ranges

Type: SEMVER
Events: Introduced

4.0.0

Fixed

4.5.3

Ecosystem specific

{
    "affected_functions": [
        "(handlebars).helpers.lookup"
    ]
}