deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-26117
Published: 2020-09-27
Description: In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the certificates as authorities, meaning that the owner of a certificate could impersonate any server after a client had added an exception.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00024.html; https://bugzilla.opensuse.org/show_bug.cgi?id=1176733
CVE: CVE-2020-25812
Published: 2020-09-27
Description: An issue was discovered in MediaWiki 1.34.x before 1.34.4. On Special:Contributions, the NS filter uses unescaped messages as keys in the option key for an HTMLForm specifier. This is vulnerable to a mild XSS if one of those messages is changed to include raw HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gerrit.wikimedia.org/g/mediawiki/core/+/ad4a3ba45fb955aa8c0eb3c83809b16b40a498b9/includes/specials/SpecialContributions.php#592; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/; https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
CVE: CVE-2020-25813
Published: 2020-09-27
Description: In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, Special:UserRights exposes the existence of hidden users.
CVSS Score: 5.3 (MEDIUM)
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/; https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html; https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
CVE: CVE-2020-25814
Published: 2020-09-27
Description: In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, XSS related to jQuery can occur. The attacker creates a message with [javascript:payload xss] and turns it into a jQuery object with mw.message().parse(). The expected result is that the jQuery object does not contain an <a> tag (or it does not have a href attribute, or it's empty, etc.). The actual result is that the object contains an <a href ="javascript... that executes when clicked.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/; https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html; https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
CVE: CVE-2020-25815
Published: 2020-09-27
Description: An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely using message text to build options names for an HTML multi-select field. The relevant code should use escaped() instead of text().
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gerrit.wikimedia.org/g/mediawiki/core/+/ec76e14be658187544f07c1a249a047e1a75eaf8/includes/logging/LogEventsList.php#214; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/; https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
CVE: CVE-2020-25827
Published: 2020-09-27
Description: An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. For Wikis using OATHAuth on a farm/cluster (such as via CentralAuth), rate limiting of OATH tokens is only done on a single site level. Thus, multiple requests can be made across many wikis/sites concurrently.
CVSS Score: 7.5 (HIGH)
CWE: CWE-307
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/; https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html; https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
CVE: CVE-2020-25828
Published: 2020-09-27
Description: An issue was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. The non-jqueryMsg version of mw.message().parse() doesn't escape HTML. This affects both message contents (which are generally safe) and the parameters (which can be based on user input). (When jqueryMsg is loaded, it correctly accepts only whitelisted tags in message contents, and escapes all parameters. Situations with an unloaded jqueryMsg are rare in practice, but can for example occur for Special:SpecialPages on a wiki with no extensions installed.)
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/; https://lists.wikimedia.org/pipermail/mediawiki-announce; https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
CVE: CVE-2020-25869
Published: 2020-09-27
Description: An information leak was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. Handling of actor ID does not necessarily use the correct database or correct wiki.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/; https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html; https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
CVE: CVE-2020-26120
Published: 2020-09-27
Description: XSS exists in the MobileFrontend extension for MediaWiki before 1.34.4 because section.line is mishandled during regex section line replacement from PageGateway. Using crafted HTML, an attacker can elicit an XSS attack via jQuery's parseHTML method, which can cause image callbacks to fire even without the element being appended to the DOM.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gerrit.wikimedia.org/r/q/I42e079bc875d17b336ab015f3678eaedc26e10ea; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/; https://phabricator.wikimedia.org/T262213
CVE: CVE-2020-26121
Published: 2020-09-27
Description: An issue was discovered in the FileImporter extension for MediaWiki before 1.34.4. An attacker can import a file even when the target page is protected against "page creation" and the attacker should not be able to create it. This occurs because of a mishandled distinction between an upload restriction and a create restriction. An attacker cannot leverage this to overwrite anything, but can leverage this to force a wiki to have a page with a disallowed title.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://commons.wikimedia.org/w/index.php?oldid=454609892#File:Wiki.png; https://gerrit.wikimedia.org/r/q/Ib852a96afc4dca10516d0510e69c10f9892b351b; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/
CVE: CVE-2020-24562
Published: 2020-09-29
Description: A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This CVE is similar, but not identical to CVE-2020-24556.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://success.trendmicro.com/solution/000263633; https://www.zerodayinitiative.com/advisories/ZDI-20-1226/; https://success.trendmicro.com/solution/000263633
CVE: CVE-2020-24563
Published: 2020-09-29
Description: A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option (if configured), which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: https://success.trendmicro.com/solution/000271974; https://www.zerodayinitiative.com/advisories/ZDI-20-1218/; https://success.trendmicro.com/solution/000271974
CVE: CVE-2020-24564
Published: 2020-09-29
Description: An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit these vulnerabilities. The subs affected in this vulnerability makes it unique compared to similar CVEs such as CVE-2020-24565 and CVE-2020-25770.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://success.trendmicro.com/solution/000271974; https://www.zerodayinitiative.com/advisories/ZDI-20-1219/; https://success.trendmicro.com/solution/000271974
CVE: CVE-2020-24565
Published: 2020-09-29
Description: An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit these vulnerabilities. The subs affected in this vulnerability makes it unique compared to similar CVEs such as CVE-2020-24564 and CVE-2020-25770.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://success.trendmicro.com/solution/000271974; https://www.zerodayinitiative.com/advisories/ZDI-20-1220/; https://success.trendmicro.com/solution/000271974
CVE: CVE-2020-25770
Published: 2020-09-29
Description: An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit these vulnerabilities. The subs affected in this vulnerability makes it unique compared to similar CVEs such as CVE-2020-24564 and CVE-2020-25771.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://success.trendmicro.com/solution/000271974; https://www.zerodayinitiative.com/advisories/ZDI-20-1221/; https://success.trendmicro.com/solution/000271974
CVE: CVE-2020-25771
Published: 2020-09-29
Description: An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit these vulnerabilities. The subs affected in this vulnerability makes it unique compared to similar CVEs such as CVE-2020-24564 and CVE-2020-25770.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://success.trendmicro.com/solution/000271974; https://www.zerodayinitiative.com/advisories/ZDI-20-1223/; https://success.trendmicro.com/solution/000271974
CVE: CVE-2020-25772
Published: 2020-09-29
Description: An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit these vulnerabilities. The subs affected in this vulnerability makes it unique compared to similar CVEs such as CVE-2020-24564 and CVE-2020-25771.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://success.trendmicro.com/solution/000271974; https://www.zerodayinitiative.com/advisories/ZDI-20-1222/; https://success.trendmicro.com/solution/000271974
CVE: CVE-2020-25773
Published: 2020-09-29
Description: A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to execute arbitrary code on affected products. User interaction is required to exploit this vulnerability in that the target must import a corrupted configuration file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://success.trendmicro.com/solution/000271974; https://www.zerodayinitiative.com/advisories/ZDI-20-1224/; https://success.trendmicro.com/solution/000271974
CVE: CVE-2020-25774
Published: 2020-09-29
Description: A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red information disclosure which would disclose sensitive information to an unprivileged account. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://success.trendmicro.com/solution/000271974; https://www.zerodayinitiative.com/advisories/ZDI-20-1225/; https://success.trendmicro.com/solution/000271974
CVE: CVE-2020-25775
Published: 2020-09-29
Description: The Trend Micro Security 2020 (v16) consumer family of products is vulnerable to a security race condition arbitrary file deletion vulnerability that could allow an unprivileged user to manipulate the product's secure erase feature to delete files with a higher set of privileges.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-362
References: https://helpcenter.trendmicro.com/en-us/article/TMKA-09909; https://www.zerodayinitiative.com/advisories/ZDI-20-1227/; https://helpcenter.trendmicro.com/en-us/article/TMKA-09909
CVE: CVE-2020-4607
Published: 2020-09-29
Description: IBM Security Secret Server (IBM Security Verify Privilege Vault Remote 1.2 ) could allow a local user to bypass security restrictions due to improper input validation. IBM X-Force ID: 184884.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/184884; https://www.ibm.com/support/pages/node/6338813; https://exchange.xforce.ibmcloud.com/vulnerabilities/184884
CVE: CVE-2020-15216
Published: 2020-09-29
Description: In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature validation and pass off an altered file as a signed one. A patch is available, all users of goxmldsig should upgrade to at least revision f6188febf0c29d7ffe26a0436212b19cb9615e64 or version 1.1.0
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-347, CWE-347
References: https://github.com/russellhaering/goxmldsig/commit/f6188febf0c29d7ffe26a0436212b19cb9615e64; https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-q547-gmf8-8jr7; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GUH33FPUXED3FHYL25BJOQPRKFGPOMS2/
CVE: CVE-2020-5132
Published: 2020-09-30
Description: SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerability. When the users publicly display their organization’s internal domain names in the SSL-VPN authentication page, an attacker with knowledge of internal domain names can potentially take advantage of this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0006; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0006
CVE: CVE-2020-15731
Published: 2020-09-30
Description: An improper Input Validation vulnerability in the code handling file renaming and recovery in Bitdefender Engines allows an attacker to write an arbitrary file in a location hardcoded in a specially-crafted malicious file name. This issue affects: Bitdefender Engines versions prior to 7.85448.
CVSS Score: 3.2 (LOW)
CWE: CWE-20, CWE-20
References: https://www.bitdefender.com/support/security-advisories/local-privilege-escalation-in-bitdefender-engines-va-8953; https://www.bitdefender.com/support/security-advisories/local-privilege-escalation-in-bitdefender-engines-va-8953
CVE: CVE-2019-17098
Published: 2020-09-30
Description: Use of hard-coded cryptographic key vulnerability in August Connect Wi-Fi Bridge App, Connect Firmware allows an attacker to decrypt an intercepted payload containing the Wi-Fi network authentication credentials. This issue affects: August Connect Wi-Fi Bridge App version v10.11.0 and prior versions on Android. August Connect Firmware version 2.2.12 and prior versions.
CVSS Score: 3.5 (LOW)
CWE: CWE-321, CWE-798
References: https://labs.bitdefender.com/2020/08/smart-locks-not-so-smart-with-wi-fi-security/; https://labs.bitdefender.com/2020/08/smart-locks-not-so-smart-with-wi-fi-security/
CVE: CVE-2020-4629
Published: 2020-09-30
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local user with specialized access to obtain sensitive information from a detailed technical error message. This information could be used in further attacks against the system. IBM X-Force ID: 185370.
CVSS Score: 3.3 (LOW)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/185370; https://www.ibm.com/support/pages/node/6339255; https://exchange.xforce.ibmcloud.com/vulnerabilities/185370
CVE: CVE-2020-12505
Published: 2020-09-30
Description: Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below.
CVSS Score: 8.2 (HIGH)
CWE: CWE-306, CWE-306
References: https://cert.vde.com/en-us/advisories/vde-2020-027; https://cert.vde.com/en-us/advisories/vde-2020-027
CVE: CVE-2020-12506
Published: 2020-09-30
Description: Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the settings of the devices by sending specifically constructed requests without authentication This issue affects: WAGO 750-362, WAGO 750-363, WAGO 750-823, WAGO 750-832/xxx-xxx, WAGO 750-862, WAGO 750-891, WAGO 750-890/xxx-xxx in versions FW03 and prior versions.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://cert.vde.com/en-us/advisories/vde-2020-028; https://cert.vde.com/en-us/advisories/vde-2020-028
CVE: CVE-2018-11765
Published: 2020-09-30
Description: In Apache Hadoop versions 3.0.0-alpha2 to 3.0.0, 2.9.0 to 2.9.2, 2.8.0 to 2.8.5, any users can access some servlets without authentication when Kerberos authentication is enabled and SPNEGO through HTTP is not enabled.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://lists.apache.org/thread.html/r17d94d132b207dad221595fd8b8b18628f5f5ec7e3f5be939ecd8928%40%3Ccommits.druid.apache.org%3E; https://lists.apache.org/thread.html/r2c7f899911a04164ed1707083fcd4135f8427e04778c87d83509b0da%40%3Cgeneral.hadoop.apache.org%3E; https://lists.apache.org/thread.html/r46447f38ea8c89421614e9efd7de5e656186d35e10fc97cf88477a01%40%3Ccommits.druid.apache.org%3E
CVE: CVE-2018-5353
Published: 2020-09-30
Description: The custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 build 5517 allows remote attackers to execute code and escalate privileges via spoofing. It does not authenticate the intended server before opening a browser window. An unauthenticated attacker capable of conducting a spoofing attack can redirect the browser to gain execution in the context of the WinLogon.exe process. If Network Level Authentication is not enforced, the vulnerability can be exploited via RDP. Additionally, if the web server has a misconfigured certificate then no spoofing attack is required
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-290
References: http://zoho.com; https://github.com/missing0x00/CVE-2018-5353; https://www.manageengine.com/products/self-service-password/release-notes.html
CVE: CVE-2018-5354
Published: 2020-09-30
Description: The custom GINA/CP module in ANIXIS Password Reset Client before version 3.22 allows remote attackers to execute code and escalate privileges via spoofing. When the client is configured to use HTTP, it does not authenticate the intended server before opening a browser window. An unauthenticated attacker capable of conducting a spoofing attack can redirect the browser to gain execution in the context of the WinLogon.exe process. If Network Level Authentication is not enforced, the vulnerability can be exploited via RDP.
CVSS Score: 8.8 (HIGH)
CWE: CWE-290
References: http://anixis.com; https://github.com/missing0x00/CVE-2018-5354; http://anixis.com
CVE: CVE-2019-18989
Published: 2020-09-30
Description: A partial authentication bypass vulnerability exists on Mediatek MT7620N 1.06 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which would allow an attacker to discern information or potentially modify data.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-290
References: https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/; https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/
CVE: CVE-2019-18990
Published: 2020-09-30
Description: A partial authentication bypass vulnerability exists on Realtek RTL8812AR 1.21WW, RTL8196D 1.0.0, RTL8192ER 2.10, and RTL8881AN 1.09 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which would allow an attacker to discern information or potentially modify data.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-290
References: https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/; https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/
CVE: CVE-2019-18991
Published: 2020-09-30
Description: A partial authentication bypass vulnerability exists on Atheros AR9132 3.60(AMX.8), AR9283 1.85, and AR9285 1.0.0.12NA devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which would allow an attacker to discern information or potentially modify data.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-290
References: https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/; https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/
CVE: CVE-2019-20920
Published: 2020-09-30
Description: Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on a server processing Handlebars templates or in a victim's browser (effectively serving as XSS).
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://snyk.io/vuln/SNYK-JS-HANDLEBARS-534478; https://www.npmjs.com/advisories/1316; https://www.npmjs.com/advisories/1324
CVE: CVE-2019-20921
Published: 2020-09-30
Description: bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS). It does not escape title values in OPTION elements. This may allow attackers to execute arbitrary JavaScript in a victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/advisories/GHSA-9r7h-6639-v5mw; https://github.com/snapappointments/bootstrap-select/issues/2199; https://issues.jtl-software.de/issues/SHOP-7964
CVE: CVE-2019-20922
Published: 2020-09-30
Description: Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be forced into an endless loop while processing crafted templates. This may allow attackers to exhaust system resources.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/handlebars-lang/handlebars.js/commit/8d5530ee2c3ea9f0aee3fde310b9f36887d00b8b; https://snyk.io/vuln/SNYK-JS-HANDLEBARS-480388; https://www.npmjs.com/advisories/1300