The vulnerability of the Handlebars template creation tool is related to errors in code generation. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

🗓️ 20 Sep 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Handlebars engine has a code generation error vulnerability that can expose data and compromise integrity.

Reporter	Title	Published	Views	Family All 68
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in JQuery, Node.js and Swagger UI	17 May 202319:40	–	ibm
IBM Security Bulletins	Security Bulletin: Critical Vulnerabilities in libraries used by libraries that IBM Spectrum discover is using (libraries of libraries)	28 Mar 202216:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Jan 202317:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vulnerable to multiple vulnerabilities	12 Dec 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance - Identity Manager Virtual Appliance	30 Jun 202305:54	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.7 contains fixes for multiple security vulnerabilities.	15 Dec 202209:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect IBM Business Automation Workflow - CVE-2018-25031, CVE-2021-23369, CVE-23383	7 Oct 202217:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for July 2022	11 Aug 202209:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.2	18 Jun 202414:02	–	ibm
ATTACKERKB	CVE-2021-23383	4 May 202108:32	–	attackerkb

Vulners

Node

yehuda_katz handlebarsRange<4.7.7

Source	Link
github	www.github.com/handlebars-lang/handlebars.js/commit/f0589701698268578199be25285b2ebea1c1e427
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-23383
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-23383
snyk	www.snyk.io/vuln/SNYK-JS-HANDLEBARS-1279029
web	www.web.nvd.nist.gov/view/vuln/detail

20 Sep 2021 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 27.5

CVSS 39.8

EPSS0.04506

Handlebars template code generation error data exposure integrity compromise service failures