Lucene search
K

6 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-29827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration...

9.8CVSS8.3AI score0.6627EPSS
Exploits1References2
OSV
OSV
added 2023/05/04 2:15 p.m.6 views

CVE-2023-29827

ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter. NOTE: this is disputed by the vendor because the render function is not intended to be used with...

9.8CVSS7.2AI score
Exploits0References2
UbuntuCve
UbuntuCve
added 2023/05/04 2:15 p.m.104 views

CVE-2023-29827

ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter. NOTE: this is disputed by the vendor because the render function is not intended to be used with...

9.8CVSS6.8AI score0.6627EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2023/05/04 12:0 a.m.11 views

CVE-2023-29827

ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter. NOTE: this is disputed by the vendor because the render function is not intended to be used with...

9.8AI score0.6627EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/05/04 12:0 a.m.27 views

CVE-2023-29827

ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter. NOTE: this is disputed by the vendor because the render function is not intended to be used with...

10AI score0.6627EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2023/05/04 12:0 a.m.179 views

CVE-2023-29827

ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter. NOTE: this is disputed by the vendor because the render function is not intended to be used with...

9.8CVSS7.9AI score0.6627EPSS
Exploits1
Rows per page
Query Builder