CVE-2022-0323

High

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1.

@huntrdev·CWE-1336·Published 2022-01-21

CVSS

8.8

EPSS

0.01

KEV

Exploits

cve.orgen

117 chars

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1.

NVDen

117 chars

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1.

OSV.deven

162 chars

In Mustache.php v2.0.0 through v2.14.0, Sections tag can lead to arbitrary php code execution even if strict_callables is true when section value is controllable.

GHSAen

162 chars

In Mustache.php v2.0.0 through v2.14.0, Sections tag can lead to arbitrary php code execution even if strict_callables is true when section value is controllable.

NVDes

148 chars

Una Neutralización Inapropiada de Elementos Especiales Usados en un Motor de Plantillas en Packagist mustache/mustache versiones anteriores a 2.14.1

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.5	8.0	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P
3.0	Primary	cve.org	5.3	—	—	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L