CVE-2023-29827

2023-05-0400:00:00

mitre

www.cve.org

cve-2023-29827

ejs

server-side

template injection

closedelimiter parameter

vendor dispute

render function

untrusted input

10 High

AI Score

Confidence

High

0.101 Low

EPSS

Percentile

94.9%

JSON

ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter. NOTE: this is disputed by the vendor because the render function is not intended to be used with untrusted input.