ID:6482 - Exploit for Prototype Pollution in handlebars.js - CVE-2021-23383

 
Main Vulnerability Database Exploits ID:6482 - Exploit for Prototype Pollution in handlebars.js - CVE-2021-23383

ID:6482 - Exploit for Prototype Pollution in handlebars.js - CVE-2021-23383

Published: June 29, 2021


Vulnerability identifier: #VU53013
Vulnerability risk: High
CVE-ID: CVE-2021-23383
CWE-ID: CWE-94
Exploitation vector: Remote access
Vulnerable software:
handlebars.js

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation when selecting certain compiling options to compile templates. A remote attacker can execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Install update from vendor's website.