CVE-2021-23369

Katalog CVE

CVSS 9.8 · Critical EPSS 7,0%

Kerentanan pada handlebarsjs handlebars. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.

Rincian

Terbit di NVD

12 April 2021

Terakhir diubah

8 Oktober 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

7,0% peluang dieksploitasi; lebih tinggi dari 94,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/handlebars-lang/handlebars.js/commit/b6d3de7123eebba603e321f04afdbae608e8fea8 patch · advisory pihak ketiga
• https://github.com/handlebars-lang/handlebars.js/commit/f0589701698268578199be25285b2ebea1c1e427 patch · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210604-0008/ advisory pihak ketiga
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074950 exploit · advisory pihak ketiga
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074951 exploit · advisory pihak ketiga
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074952 exploit · advisory pihak ketiga
• https://snyk.io/vuln/SNYK-JS-HANDLEBARS-1056767 exploit · advisory pihak ketiga