PT-2021-19954 · Unknown · Express-Handlebars

Agustin Gianni + 1 · Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-32820

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Express-handlebars (affected versions not specified)

Description The layout parameter in Express-handlebars may trigger file disclosure vulnerabilities in downstream applications, allowing inclusion of files with existing extensions. Files without extensions will have .handlebars appended to them. This issue is related to the mixing of pure template data with engine configuration options through the Express render API.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Information Disclosure

Weakness Enumeration

CWE-94

CWE-200

Related Identifiers

BIT-HANDLEBARS-2021-32820

CVE-2021-32820

GHSA-FR76-2WP8-FP92

Affected Products

Express-Handlebars

References · 11

• 🔥 https://github.com/express-handlebars/express-handlebars/pull/163 · Exploit
• 🔥 https://securitylab.github.com/advisories/GHSL-2021-018-express-handlebars · Exploit
• https://github.com/express-handlebars/express-handlebars/commit/78c47a235c4ad7bc2674bddd8ec2721567ed8c72 · Patch
• https://osv.dev/vulnerability/CVE-2021-32820 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-32820 · Security Note
• https://osv.dev/vulnerability/GHSA-fr76-2wp8-fp92 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-handlebars-2021-32820 · Vendor Advisory
• https://github.com/express-handlebars/express-handlebars/blob/78c47a235c4ad7bc2674bddd8ec2721567ed8c72/README.md#danger- · Note
• https://github.com/express-handlebars/express-handlebars#danger- · Note
• https://npmjs.com/package/express-handlebars · Note
• https://t.me/cvenotify/14474 · Telegram Post