Express-handlebars is a view engine for Express, mixing template data with configuration. The layout parameter may trigger file disclosure vulnerabilities, restricted to files with existing extensions
Reporter | Title | Published | Views | Family All 10 |
---|---|---|---|---|
![]() | Insecure template handling in Express-handlebars | 10 Feb 202223:35 | – | github |
![]() | CVE-2021-32820 | 14 May 202119:15 | – | osv |
![]() | Insecure template handling in Express-handlebars | 10 Feb 202223:35 | – | osv |
![]() | CVE-2021-32820 | 14 May 202119:15 | – | cve |
![]() | Information Disclosure | 17 May 202103:35 | – | veracode |
![]() | Express-handlebars - Local File Inclusion | 21 Jul 202105:10 | – | nuclei |
![]() | Information disclosure | 14 May 202119:15 | – | prion |
![]() | CVE-2021-32820 File disclosure in Express Handlebars | 14 May 202118:25 | – | cvelist |
![]() | CVE-2021-32820 | 14 May 202119:15 | – | nvd |
![]() | Security Bulletin: IBM Security SOAR is using a component with known vulnerabilities - Handlebars.js ( CVE-2019-19919, CVE-2021-32820) | 16 Jul 202111:00 | – | ibm |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo