Lucene search
PRIOn knowledge basePRION:CVE-2023-29827HistoryMay 04, 2023 - 2:15 p.m.
Input validation
2023-05-0414:15:00
PRIOn knowledge base
www.prio-n.com
6
disputed
vendor
server-side
template injection
nvd
DISPUTED ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter. NOTE: this is disputed by the vendor because the render function is not intended to be used with untrusted input.
Related
nvd
nvd
CVE-2023-29827
2023-05-04 14:15:11
debiancve
debiancve
CVE-2023-29827
2023-05-04 14:15:11
cvelist
cvelist
CVE-2023-29827
2023-05-04 00:00:00
nuclei
nuclei
Embedded JavaScript(EJS) 3.1.6 - Template Injection
2024-05-14 07:52:09
cve
cve
CVE-2023-29827
2023-05-04 14:15:11
ubuntucve
ubuntucve
CVE-2023-29827
2023-05-04 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Node.js ejs module code execution vulnerability( CVE-2023-29827)
2023-07-05 19:42:39