ID:6482 - Exploit for Prototype Pollution in handlebars.js - CVE-2021-23383
Published: June 29, 2021
handlebars.js
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to improper input validation when selecting certain compiling options to compile templates. A remote attacker can execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.