5 matches found
CVE-2017-1000188
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...
6.1CVSS6.4AI score0.01233EPSS
SaveExploits0References2
CVE-2017-1000189
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...
7.4AI score0.02267EPSS
SaveExploits0References2
CVE-2017-1000188: Improper Neutralization of Input During Web Page Generation
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...
6.1CVSS6.9AI score0.01233EPSS
SaveExploits0References2
CVE-2017-1000228: Improper Input Validation
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...
10CVSS8.6AI score0.06328EPSS
SaveExploits1References2
20