Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-32822

Upgrade handlebars.js

    XMLWordPrintable

    Details

      Description

      Client reported the following CVE with handlebars: https://nvd.nist.gov/vuln/detail/CVE-2021-23383
      It seems we use handlebars-1.0.0.js in the nuxeo-rest-api-server module. Found at this location on a Nuxeo instance: nxserver/web/root.war/modules/org.nuxeo.ecm.platform.restapi.server/skin/resources/lib

        Attachments

          Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. NXP-32835 Upgrade underscore-min.js

          • Major - Major loss of function.
          • Resolved

          Clean up - NXP-32841 Move Swagger Rest API and Automation doc to an optional marketplace

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved
          is required by

          Bug - A problem which impairs or prevents the functions of the product. NXP-32879 NUXEO API Documentation page did not display list of items

          • Major - Major loss of function.
          • Resolved

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: