CVE-2022-25967

🗓️ 30 Jan 2023 05:00:01Reported by snykType

Versions of package eta before 2.0.0 vulnerable to Remote Code Execution (RCE) by overwriting template engine configuration variables with view options received from The Express render API. This is exploitable only for users who are rendering templates with user-defined data

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-25967	30 Jan 202307:36	–	circl
CNNVD	Eta 安全漏洞	30 Jan 202300:00	–	cnnvd
CVE	CVE-2022-25967	30 Jan 202305:00	–	cve
EUVD	EUVD-2023-0508	3 Oct 202520:07	–	euvd
Github Security Blog	Eta vulnerable to Code Injection via templates rendered with user-defined data	30 Jan 202306:30	–	github
NVD	CVE-2022-25967	30 Jan 202305:15	–	nvd
OSV	GHSA-MF6X-HRGR-658F Eta vulnerable to Code Injection via templates rendered with user-defined data	30 Jan 202306:30	–	osv
Prion	Remote code execution	30 Jan 202305:15	–	prion
RedhatCVE	CVE-2022-25967	14 Mar 202305:13	–	redhatcve
Snyk	Remote Code Execution (RCE)	29 Jun 202210:52	–	snyk

[
  {
    "product": "eta",
    "versions": [
      {
        "version": "0",
        "lessThan": "2.0.0",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "vendor": "n/a"
  }
]

Source	Link
security	www.security.snyk.io/vuln/SNYK-JS-ETA-2936803
github	www.github.com/eta-dev/eta/blob/9c8e4263d3a559444a3881a85c1607bf344d0b28/src/file-handlers.ts%23L182
github	www.github.com/eta-dev/eta/commit/5651392462ee0ff19d77c8481081a99e5b9138dd
github	www.github.com/eta-dev/eta/blob/9c8e4263d3a559444a3881a85c1607bf344d0b28/src/compile-string.ts%23L21

30 Jan 2023 05:00Current

9.2High risk

Vulners AI Score9.2

CVSS 3.18.1

EPSS0.19024