1 matches found
nodejs-handlebars: Remote code execution when compiling untrusted compile templates with strict:true option
A flaw was found in nodejs-handlebars. A missing check when getting prototype properties in the template function allows an attacker, who can provide untrusted handlebars templates, to execute arbitrary code in the javascript system e.g. browser or server when the template is compiled with the...