handlebars 安全漏洞

漏洞信息详情

handlebars 安全漏洞

CNNVD编号：CNNVD-202105-130
危害等级：超危-->
危害等级：超危
CVE编号： CVE-2021-23383
漏洞类型：其他
发布时间： 2021-05-04
威胁类型：远程
更新时间： 2021-11-29
厂商：
漏洞来源：

漏洞简介

handlebars是一款语义化的Web模板系统。

handlebars 4.7.7之前版本存在安全漏洞，该漏洞源于当选择某些编译选项来编译来自不可信源的模板时，容易受到原型污染的影响。

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://github.com/handlebars-lang/handlebars.js/commit/f0589701698268578199be25285b2ebea1c1e427

参考网址

来源:MISC

链接:https://github.com/handlebars-lang/handlebars.js/commit/f0589701698268578199be25285b2ebea1c1e427

来源:CONFIRM

链接:https://security.netapp.com/advisory/ntap-20210618-0007/

来源:MISC

链接:https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1279030

来源:MISC

链接:https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1279031

来源:MISC

链接:https://snyk.io/vuln/SNYK-JS-HANDLEBARS-1279029

来源:MISC

链接:https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1279032

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2276

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/163306/Red-Hat-Security-Advisory-2021-2500-01.html

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021070402

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3935

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2657

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2021-23383

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/165002/Red-Hat-Security-Advisory-2021-4032-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3934

受影响实体

暂无

补丁

handlebars 安全漏洞的修复措施

正文

handlebars 安全漏洞

漏洞信息详情