Denial Of Service (DoS)

🗓️ 06 Nov 2019 03:51:26Reported by Veracode Vulnerability DatabaseType

handlebars vulnerability in matching templates causing denial of servic

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: Critical Vulnerabilities in libraries used by libraries that IBM Spectrum discover is using (libraries of libraries)	28 Mar 202216:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Jan 202317:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vulnerable to multiple vulnerabilities	12 Dec 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.7 contains fixes for multiple security vulnerabilities.	15 Dec 202209:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.2	18 Jun 202414:02	–	ibm
CVE	CVE-2019-20922	30 Sep 202012:30	–	cve
Cvelist	CVE-2019-20922	30 Sep 202012:30	–	cvelist
Debian CVE	CVE-2019-20922	30 Sep 202012:30	–	debiancve
EUVD	EUVD-2022-0849	3 Oct 202520:07	–	euvd
Github Security Blog	Regular Expression Denial of Service in Handlebars	10 Feb 202220:38	–	github

Vulners

Node

-ovirt-web-uiMatch1.6.3_1.el8ev

-ovirt-web-uiMatch1.6.4_1.el8ev

ovirt ovirt-engineMatch1.2.2_1.el8ev

ovirt ovirt-engineMatch1.2.3_1.el8ev

handlebarsRange≤4.4.4

Source	Link
github	www.github.com/wycats/handlebars.js/issues/1579
github	www.github.com/handlebars-lang/handlebars.js/commit/8d5530ee2c3ea9f0aee3fde310b9f36887d00b8b
npmjs	www.npmjs.com/advisories/1300

04 Feb 2021 05:56Current

2.6Low risk

Vulners AI Score2.6

CVSS 3.17.5

CVSS 27.8

EPSS0.03747