13 matches found
Security Bulletin: IBM Cloud Pak for Data is vulnerable to Prototype Pollution due to ejs package ( CVE-2024-33883)
Summary Potential vulnerabilities in ejs package has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2024-33883 DESCRIPTION: The ejs aka Embedded JavaScript templates package before 3.1.10 for Node.js lacks certain pollution protection. CWE:CWE-693:...
CVE-2024-33883
The ejs aka Embedded JavaScript templates package before 3.1.10 for Node.js lacks certain pollution protection...
Linux Distros Unpatched Vulnerability : CVE-2024-33883
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ejs aka Embedded JavaScript templates package before 3.1.10 for Node.js lacks certain pollution protection. CVE-2024-33883 Note that Nessus relies on the...
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to ejs lack of pollution protection vulnerability [ CVE-2024-33883]
Summary Potential ejs aka Embedded JavaScript templates package lack of pollution protection vulnerability CVE-2024-33883 have been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information...
Exploit for CVE-2024-33883
CVE-2024-33883 [email protected], Insufficient Prototype Pollutio...
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service due to [CVE-2024-33883]
Summary Node.js module ejs is used by IBM App Connect Enterprise Certified Container for generating user interfaces in the DesignerAuthoring operand. IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service. This bulletin provides patch...
5ug-cli (>=1.0.72, <=1.4.0), @0xgraph/cli (>=0.0.1, <=0.2.1) +824 more potentially affected by CVE-2024-33883 via ejs (>=3.0.1, <=3.1.9)
ejs NPM version =3.0.1, =1.0.72, =0.0.1, =1.1.0, =0.1.7, =0.0.9, =1.0.1, =2.16.49, =1.2.4, =1.15.41, =2.0.0-beta.2, =2.0.0-beta.2, =1.1.21, =1.4.3 and more Source cves: CVE-2024-33883 Source advisory: OSV:GHSA-GHR5-CH3P-VCR6...
CVE-2024-33883 vulnerabilities
Vulnerabilities for packages: lerna...
CVE-2024-33883 vulnerabilities
Vulnerabilities for packages: arangodb, lerna...
CVE-2024-33883
The ejs aka Embedded JavaScript templates package before 3.1.10 for Node.js lacks certain pollution protection...
CVE-2024-33883
The ejs aka Embedded JavaScript templates package before 3.1.10 for Node.js lacks certain pollution protection...
CVE-2024-33883
The ejs (Embedded JavaScript templates) package for Node.js prior to version 3.1.10 is vulnerable to prototype pollution due to a lack of sufficient validation. An attacker can exploit this by polluting the opts.client and opts.escapeFunction properties. If the attacker gains control of the rende...
