Lucene search
Veracode Vulnerability DatabaseVERACODE:31813HistoryAug 25, 2021 - 3:16 a.m.
Template Injection
2021-08-2503:16:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
hbs
template injection
express render api
file viewing
configuration options
EPSS
0.002
Percentile
60.4%
hbs is vulnerable to template injection. The vulnerability exists due to a lack of sanitization of configuration options when input into the system via the Express render API. An attacker is able to view a file by overwriting an internal configuration option.
Related
nvd
nvd
CVE-2021-32822
2021-08-16 19:15:14
ibm
ibm
cve
cve
CVE-2021-32822
2021-08-16 19:15:14
osv
osv
cnvd
cnvd
TryGhost express-hbs information disclosure vulnerability
2021-08-18 00:00:00
prion
prion
Arbitrary file deletion
2021-08-16 19:15:00
cvelist
cvelist
CVE-2021-32822 File disclosure in hbs
2021-08-16 18:45:10
