CVE-2017-1000228

Critical

Published: 17/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Nodejs ejs versions older than 2.5.3 are vulnerable to remote code execution due to weak input validation in the ejs.renderFile() function.

An attacker could exploit this vulnerability to execute arbitrary code on the server, potentially leading to serious security breaches.

It is recommended to upgrade ejs to version 2.5.3 or later to mitigate this vulnerability.

Original NVD description (English source)

nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile() function