Опубликовано: 17 нояб. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3
CVSS3: 6.1
Описание
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 2.5.7-1 |
| devel | not-affected | 3.1.8+~3.1.1-1 |
| esm-apps/bionic | not-affected | 2.5.7-1 |
| esm-apps/focal | not-affected | 2.5.7-1 |
| esm-apps/jammy | not-affected | 3.1.6-2 |
| focal | not-affected | 2.5.7-1 |
| jammy | not-affected | 3.1.6-2 |
| kinetic | not-affected | 3.1.8+~3.1.1-1 |
| trusty | DNE | |
| upstream | released | 2.5.7-1 |
Показывать по
10
EPSS
Процентиль: 46%
0.00234
Низкий
4.3 Medium
CVSS2
6.1 Medium
CVSS3
Связанные уязвимости
CVSS3: 6.1
redhat
около 9 лет назад
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection
CVSS3: 6.1
nvd
около 8 лет назад
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection
CVSS3: 6.1
debian
около 8 лет назад
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scri ...
EPSS
Процентиль: 46%
0.00234
Низкий
4.3 Medium
CVSS2
6.1 Medium
CVSS3