CVE-2019-20920
nodejs-handlebars: lookup helper fails to properly validate templates allowing for arbitrary JavaScript execution
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim's browser (effectively serving as XSS).
Handlebars versiones anteriores a 3.0.8 y versiones 4.x anteriores a 4.5.3, son vulnerables a una ejecución de código arbitraria. El asistente de búsqueda no comprueba apropiadamente las plantillas, permitiendo a atacantes enviar plantillas que ejecutan JavaScript arbitrario. Esto se puede ser usado para ejecutar código arbitrario en un servidor que procesa las plantillas de Handlebars o en el navegador de una víctima (que sirve efectivamente como un XSS)
A flaw was found in nodejs-handlebars, where affected versions of handlebars are vulnerable to arbitrary code execution. The package lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript into the system. This issue is used to run arbitrary code in a server processing Handlebars templates or on a victim's browser (effectively serving as Cross-Site Scripting). The highest threat from this vulnerability is to confidentiality.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2020-09-30 CVE Reserved
- 2020-09-30 CVE Published
- 2024-02-03 EPSS Updated
- 2024-08-05 CVE Updated
- 2024-08-05 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-20: Improper Input Validation
- CWE-94: Improper Control of Generation of Code ('Code Injection')
CAPEC
References (5)
URL | Tag | Source |
---|---|---|
https://snyk.io/vuln/SNYK-JS-HANDLEBARS-534478 | Third Party Advisory | |
https://www.npmjs.com/advisories/1324 | Third Party Advisory |
URL | Date | SRC |
---|---|---|
https://www.npmjs.com/advisories/1316 | 2024-08-05 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://access.redhat.com/security/cve/CVE-2019-20920 | 2023-03-20 | |
https://bugzilla.redhat.com/show_bug.cgi?id=1882260 | 2023-03-20 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Handlebarsjs Search vendor "Handlebarsjs" | Handlebars Search vendor "Handlebarsjs" for product "Handlebars" | < 3.0.8 Search vendor "Handlebarsjs" for product "Handlebars" and version " < 3.0.8" | node.js |
Affected
| ||||||
Handlebarsjs Search vendor "Handlebarsjs" | Handlebars Search vendor "Handlebarsjs" for product "Handlebars" | >= 4.0.0 < 4.5.3 Search vendor "Handlebarsjs" for product "Handlebars" and version " >= 4.0.0 < 4.5.3" | node.js |
Affected
|