CVE-2017-1000188

4.3

MEDIUMCVSS v2

Published

November 17, 2017

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection

NPMEmbedded JavaScript templates

< 2.5.5NVD

GitHubEmbedded JavaScript templates -- http://ejs.co

< 2.5.5NVD

NPM

TypeScript definitions for ejs

< 2.5.5NVD

GitHuba koa view render middleware, support all feature of ejs

< 2.5.5NVD

RubyGemsCompile and evaluate EJS (Embedded JavaScript) templates from Ruby.

< 2.5.5NVD