Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-23369

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-f2jv-r9rf-7988

Remote code execution in handlebars when compiling templates The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.

gitlab/maven/org.webjars.bowergithub.wycats/handlebars.js/CVE-2021-23369

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') The package handlebars before 4.7.7 is vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.

gitlab/maven/org.webjars/handlebars/CVE-2021-23369

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') The package handlebars before 4.7.7 is vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.

gitlab/maven/org.webjars.npm/handlebars/CVE-2021-23369

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') The package handlebars before 4.7.7 is vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.

gitlab/npm/handlebars/CVE-2021-23369

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.