1 matches found
nodejs-handlebars: Remote code execution when compiling untrusted compile templates with strict:true option
A flaw was found in nodejs-handlebars. A missing check when getting prototype properties in the template function allows an attacker, who can provide untrusted handlebars templates, to execute arbitrary code in the javascript system e.g. browser or server when the template is compiled with the...
9.8CVSS7.1AI score0.07028EPSS
SaveExploits2References4
20