136 matches found
ejs is vulnerable to remote code execution due to weak input validation
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...
GHSA-3W5V-P54C-F74X ejs is vulnerable to remote code execution due to weak input validation
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...
GHSA-HWCF-PP87-7X6P mde ejs vulnerable to XSS
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...
192.168.0.172 (4.6.1), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +621 more potentially affected by CVE-2017-1000188 via ejs (>=2.0.8, <=2.5.4)
ejs NPM version =2.0.8, =1.0.2, =0.0.1, =0.1.0, =0.1.0, =0.1.8, =1.0.0, =1.0.1, =0.1.9, =0.1.14 - @mobileit/sails 0.12.14 and more Source cves: CVE-2017-1000188 Source advisory: OSV:GHSA-HWCF-PP87-7X6P...
CVE-2017-1000189
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...
CVE-2017-1000188
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...
Denial Of Service (DoS)
ejs is vulnerable to denial of service DoS attacks. The library does not sanitize the opts parameter in the ejs.renderFile function, allowing a malicious user to pass files that when rendered can crash the application...
Cross-site Scripting (XSS)
ejs is vulnerable to cross-site scripting XSS attacks. The library does not sanitize the opts parameter in the cpOptsInData function, allowing a malicious user to pass files that can get executed when rendered...
Input validation
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...
Input validation
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...
CVE-2017-1000228
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...
CVE-2017-1000188
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...
DEBIAN-CVE-2017-1000228
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...
UBUNTU-CVE-2017-1000189
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...
CVE-2017-1000189
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...
Cross site scripting
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...
CVE-2017-1000189
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...
CVE-2017-1000228
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...