Description

Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be forced into an endless loop while processing crafted templates. This may allow attackers to exhaust system resources.

Remediation

References

CVE-2019-20922

Related Vulnerabilities

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-3592)

phpMyFAQ Exposure of Sensitive Information Through Data Queries Vulnerability (CVE-2025-69200)

WordPress Plugin Cool Timeline (Horizontal & Vertical Timeline) Security Bypass (2.3.3)

Drupal Core 8.7.x Cross-Site Scripting (8.7.0 - 8.7.13)

WordPress Plugin WordPress Poll Multiple SQL Injection Vulnerabilities (33.5)

Severity

High

Classification

CVE-2019-20922 CWE-835 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities