11 matches found
CVE-2017-1000188
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...
CVE-2017-1000228
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...
CVE-2017-1000189
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...
CVE-2017-1000189
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...
CVE-2017-1000188
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...
CVE-2017-1000228: Improper Input Validation
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...
CVE-2017-1000189: Improper Input Validation
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...
CVE-2017-1000188: Improper Neutralization of Input During Web Page Generation
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...
PT-2017-10886
Name of the Vulnerable Software and Affected Versions ejs versions prior to 2.5.5 Description The issue is related to a denial-of-service caused by weak input validation in the ejs.renderFile function. Recommendations For versions prior to 2.5.5, update to version 2.5.5 or later to resolve the...
PT-2017-10885
Name of the Vulnerable Software and Affected Versions ejs versions prior to 2.5.5 Description The issue is related to a Cross-site-scripting vulnerability in the ejs.renderFile function, which can result in code injection. Recommendations For versions prior to 2.5.5, update to version 2.5.5 or...
PT-2017-10924
Name of the Vulnerable Software and Affected Versions ejs versions prior to 2.5.3 Description The issue is related to weak input validation in the ejs.renderFile function, which can lead to remote code execution. Recommendations For versions prior to 2.5.3, update to version 2.5.3 or later to...