Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be forced into an endless loop while processing crafted templates. This may allow attackers to exhaust system resources.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-09-30T12:30:22

Updated: 2024-08-05T03:00:18.954Z

Reserved: 2020-09-30T00:00:00

Link: CVE-2019-20922

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-09-30T18:15:18.100

Modified: 2024-11-21T04:39:41.877

Link: CVE-2019-20922

cve-icon Redhat

Severity : Moderate

Publid Date: 2019-11-04T00:00:00Z

Links: CVE-2019-20922 - Bugzilla