CVE Catalog
CVE-2017-1000189
HighSummary
Nodejs ejs versions older than 2.5.5 are vulnerable to a denial-of-service attack due to weak input validation in the ejs.renderFile() function.
Risk Assessment
An attacker could exploit this vulnerability to cause service disruption, potentially leading to application downtime.
Recommendation
It is recommended to upgrade the ejs library to version 2.5.5 or later to mitigate this vulnerability.
Other vulnerabilities in nodejs ejs
Original NVD description (English source)
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile()