CVE-2017-1000228

10

HIGHCVSS v2

Published

November 17, 2017

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile() function

NPMEmbedded JavaScript templates

< 2.5.3, < 2.5.5NVD

GitHubEmbedded JavaScript templates -- http://ejs.co

< 2.5.3, < 2.5.5NVD

NPM

TypeScript definitions for ejs

< 2.5.3, < 2.5.5NVD

GitHuba koa view render middleware, support all feature of ejs

< 2.5.3, < 2.5.5NVD

RubyGemsCompile and evaluate EJS (Embedded JavaScript) templates from Ruby.

< 2.5.3, < 2.5.5NVD