EUVD-2021-1052Published

Remote Code Execution (RCE)

cve-program · CVE-2021-23369

Published

handlebars

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "product": "handlebars",
                    "vendor": "n/a",
                    "versions": [
                        {
                            "lessThan": "4.7.7",
                            "status": "affected",
                            "version": "unspecified",
                            "versionType": "custom"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

euvd · EUVD-2021-1052

Published

EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.

Original publisher date fields

datePublished: Apr 12, 2021, 1:10:28 PM

dateUpdated: Oct 8, 2026, 9:13:45 PM

8 related source bulletins · separate from aliases

RHSA-2021:2500: Red Hat Security Advisory: Red Hat OpenShift Enterprise security and bug fix update

CVE-2019-20920 · CVE-2019-20922 · CVE-2021-23369 · CVE-2021-23383

RHSA-2021:4032: Red Hat Security Advisory: Openshift Logging 5.2.3 bug fix and security update

CVE-2021-23369 · CVE-2021-23383

WID-SEC-W-2023-3032: Tenable Security Nessus Network Monitor: Mehrere Schwachstellen

CVE-2023-5363 · CVE-2021-23383 · CVE-2021-23369 · CVE-2018-9206

RHSA-2023:1334: Red Hat Security Advisory: Red Hat Process Automation Manager 7.13.2 security update

CVE-2017-12629 · CVE-2018-1000134 · CVE-2019-19919 · CVE-2019-20920 · CVE-2019-20922 · CVE-2021-23369 · CVE-2021-23383 · CVE-2021-26291

WID-SEC-W-2022-1646: Red Hat OpenShift: Mehrere Schwachstellen ermöglichen Codeausführung

CVE-2021-23369 · CVE-2021-23383

WID-SEC-W-2024-0899: Oracle Fusion Middleware: Mehrere Schwachstellen

CVE-2019-0231 · CVE-2019-10172 · CVE-2019-13990 · CVE-2021-23369 · CVE-2022-1471 · CVE-2022-24329 · CVE-2022-25147 · CVE-2022-34169 · CVE-2022-34381 · CVE-2022-42003 · CVE-2022-45378 · CVE-2022-46337 · CVE-2022-48579 · CVE-2023-24021 · CVE-2023-2976 · CVE-2023-31122 · CVE-2023-33201 · CVE-2023-35116 · CVE-2023-35887 · CVE-2023-3635 · CVE-2023-37536 · CVE-2023-44487 · CVE-2023-46218 · CVE-2023-46589 · CVE-2023-48795 · CVE-2023-5072 · CVE-2023-52428 · CVE-2024-1597 · CVE-2024-20991 · CVE-2024-20992 · CVE-2024-21006 · CVE-2024-21007 · CVE-2024-21117 · CVE-2024-21118 · CVE-2024-21119 · CVE-2024-21120 · CVE-2024-23635 · CVE-2024-26308

RHSA-2021:3016: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes version 2.3

CVE-2020-28469 · CVE-2020-28500 · CVE-2020-28851 · CVE-2020-28852 · CVE-2021-3377 · CVE-2021-21272 · CVE-2021-21309 · CVE-2021-21321 · CVE-2021-21322 · CVE-2021-23337 · CVE-2021-23343 · CVE-2021-23346 · CVE-2021-23362 · CVE-2021-23364 · CVE-2021-23368 · CVE-2021-23369 · CVE-2021-23382 · CVE-2021-23383 · CVE-2021-23839 · CVE-2021-23840 · CVE-2021-23841 · CVE-2021-27292 · CVE-2021-27358 · CVE-2021-28092 · CVE-2021-28918 · CVE-2021-29418 · CVE-2021-29477 · CVE-2021-29478 · CVE-2021-29482 · CVE-2021-33502 · CVE-2021-33623

RHSA-2021:4628: Red Hat Security Advisory: Openshift Logging 5.1.4 bug fix and security update

CVE-2021-23369 · CVE-2021-23383

No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.

Original source record · Cite this exact observation · Complete original publisher JSON

nvd · CVE-2021-23369

Published

NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.

Source analysis status: Modified

Weakness classifications: NVD-CWE-noinfo

Original publisher date fields

published: 2021-04-12T14:15:14.383

lastModified: 2026-10-08T22:17:07.613

1 source CPE criteria · context only

cpe:2.3:a:handlebarsjs:handlebars:*:*:*:*:*:node.js:*:*

The original JSON retains the logical configuration operators, exclusions and version bounds.

Original source record · Cite this exact observation · Complete original publisher JSON

osv · GHSA-f2jv-r9rf-7988

Published

handlebars

npm

SEMVER · introduced 0 → fixed 4.7.7

org.webjars:handlebars

Maven

ECOSYSTEM · introduced 0 → fixed 4.7.7

21 explicitly affected versions

1.0.0, 1.0.0-rc.3, 1.0.0-rc.4, 1.0.rc.1, 1.1.2, 1.2.1, 1.3.0, 2.0.0, 2.0.0-1, 2.0.0-alpha.2, 3.0.0, 3.0.0-1, 3.0.3, 4.0.11, 4.0.11-1, 4.0.13, 4.0.14, 4.0.2, 4.0.5, 4.0.6, 4.7.6

org.webjars.npm:handlebars

Maven

ECOSYSTEM · introduced 0 → fixed 4.7.7

21 explicitly affected versions

1.3.0, 2.0.0, 3.0.0, 3.0.1, 3.0.3, 4.0.11, 4.0.12, 4.0.14, 4.0.2, 4.0.5, 4.0.6, 4.1.1, 4.1.2, 4.2.1, 4.3.1, 4.4.0, 4.4.5, 4.5.3, 4.7.2, 4.7.3, 4.7.6

org.webjars.bowergithub.wycats:handlebars.js

Maven

ECOSYSTEM · introduced 0 → fixed 4.7.7

5 explicitly affected versions

4.1.1, 4.2.0, 4.4.5, 4.5.3, 4.7.2

Original source record · Cite this exact observation · Complete original publisher JSON