Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j5pp-6f4w-r5r6

Опубликовано: 04 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter.

ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter.

EPSS

Процентиль: 99%
0.80822
Высокий

9.8 Critical

CVSS3

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 3 года назад

ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter. NOTE: this is disputed by the vendor because the render function is not intended to be used with untrusted input.

CVSS3: 9.8
nvd
почти 3 года назад

ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter. NOTE: this is disputed by the vendor because the render function is not intended to be used with untrusted input.

CVSS3: 9.8
debian
почти 3 года назад

ejs v3.1.9 is vulnerable to server-side template injection. If the ejs ...

EPSS

Процентиль: 99%
0.80822
Высокий

9.8 Critical

CVSS3

Дефекты

CWE-74