Code Injection via a Vulnerable Template Engine

In this video, I discuss a code injection vulnerability within the Handlebars library. This bug isn’t your usual “template injection” bug.

We will use a vulnerable app to test this, while also looking at some source code to analyze the root cause of the vulnerability. Lastly, after exploiting it successfully, we will see how this can be fixed automatically via Snyk. This is a short intro which can be used