TI-2023-14035 CVE-2023-29827 · GHSA-j5pp-6f4w-r5r6
ejs v3.1.9 is vulnerable to server-side template injection.
Priority HIGH 82
ejs v3.1.9 is vulnerable to server-side template injection.
Ejs
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Ejs records in CISA KEVNo Ejs vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Ejs · all components
TI-2022-11633 CVE-2022-29078 · GHSA-phwq-j96m-2c2q
The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows server-side…
Priority HIGH 67
The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows server-side template injection in settings[view options][outputFunctionName].
TI-2017-14544 CVE-2017-1000228 · GHSA-3w5v-p54c-f74x
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak…
Priority MEDIUM 51
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile() function
TI-2017-14510 CVE-2017-1000189 · GHSA-6x77-rpqf-j6mw
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak…
Priority LOW 37
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile()
TI-2017-14509 CVE-2017-1000188 · GHSA-hwcf-pp87-7x6p
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the…
Priority LOW 30
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection