VDB
GHSA-2cf5-4w76-r9qv
GHSA-2cf5-4w76-r9qv
PUBLISHED
CVSS 7.300000190734863 HIGH
Arbitrary Code Execution in handlebars
Risk Scores
CVSS 3.1
7.300000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | gitlab-rails-ce-fips-19.0 | * |
| chainguard | gitlab-rails-ee-fips-17.8 | * |
| chainguard | gitlab-rails-ce-19.1 | * |
| chainguard | gitlab-rails-ee-17.10 | * |
| chainguard | gitlab-rails-ce-18.8 | * |
| chainguard | gitlab-rails-ee-fips-17.11 | * |
| chainguard | gitlab-rails-ce-fips-18.11 | * |
| chainguard | gitlab-rails-ce-fips-18.7 | * |
| chainguard | gitlab-rails-ee-fips-17.2 | * |
| chainguard | gitlab-rails-ce-18.3 | * |
| chainguard | gitlab-rails-ce-fips-18.5 | * |
| chainguard | gitlab-rails-ce-fips-18.1 | * |
| chainguard | gitlab-rails-ce-18.6 | * |
| chainguard | gitlab-rails-ee-fips-17.7 | * |
| chainguard | gitlab-rails-ee-fips-17.10 | * |
| chainguard | gitlab-rails-ce-19.3 | * |
| chainguard | gitlab-rails-ee-fips-17.1 | * |
| chainguard | gitlab-rails-ce-fips-18.4 | * |
| chainguard | gitlab-rails-ee-17.3 | * |
| chainguard | gitlab-rails-ee-fips-17.0 | * |
…and 35 more
Timeline
- Sep 4, 2020 CVE Published
- Feb 7, 2024 CVE Updated
References
- GitHub Advisory GHSA-2cf5-4w76-r9qv vendor-advisory
- https://www.npmjs.com/advisories/1316 url