com.github.jknack:handlebars-springmvc@4.2.0

latest version

4.5.4

latest non vulnerable version

4.5.4

first published

14 years ago

latest version published

1 months ago

licenses detected

Apache-2.0
[0.4.0,)

package registry

View on Maven Central Repository

Go back to all versions of this package

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the com.github.jknack:handlebars-springmvc package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability Vulnerable Version

Vulnerability	Vulnerable Version
H Directory Traversal Affected versions of this package are vulnerable to Directory Traversal through `SpringTemplateLoader.getResource` and `resolve` in the Spring MVC template-loading path. An attacker can read local files by supplying a `file:` or `classpath:` view name with a `#` fragment suffix, which causes the appended `.hbs` to be treated as a fragment instead of part of the filename. When a controller forwards attacker-influenced view names into `HandlebarsViewResolver`, the loader asks Spring to resolve the URL and then compiles and renders the resolved resource without rejecting fragment-bearing URLs. As a result, the application can disclose any file the JVM process can read, such as application configuration, credentials, private keys, or other on-disk secrets. How to fix Directory Traversal? Upgrade `com.github.jknack:handlebars-springmvc` to version 4.5.3 or higher.	[,4.5.3)

Directory Traversal

Affected versions of this package are vulnerable to Directory Traversal through SpringTemplateLoader.getResource and resolve in the Spring MVC template-loading path. An attacker can read local files by supplying a file: or classpath: view name with a # fragment suffix, which causes the appended .hbs to be treated as a fragment instead of part of the filename. When a controller forwards attacker-influenced view names into HandlebarsViewResolver, the loader asks Spring to resolve the URL and then compiles and renders the resolved resource without rejecting fragment-bearing URLs. As a result, the application can disclose any file the JVM process can read, such as application configuration, credentials, private keys, or other on-disk secrets.

How to fix Directory Traversal?

Upgrade com.github.jknack:handlebars-springmvc to version 4.5.3 or higher.

[,4.5.3)

Go back to all versions of this package