This affects the package latte/latte before 2.10.6. There is a way to bypass allowFunctions that will affect the security of the application. When the template is set to allow/disallow the use of certain functions, adding control characters (x00-x08) after the function will bypass these restrictions.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: snyk
Published: 2021-12-17T20:05:25.479890Z
Updated: 2024-09-16T17:48:03.457Z
Reserved: 2021-01-08T00:00:00
Link: CVE-2021-23803
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2021-12-17T20:15:08.287
Modified: 2021-12-27T19:33:59.590
Link: CVE-2021-23803
Redhat
No data.