CVE-2023-29827

Vulnerability Description

ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter. NOTE: this is disputed by the vendor because the render function is not intended to be used with untrusted input.

Vulnerability Details

Published Date

May 04, 2023

Last Modified

December 03, 2025

Source

NVD

CVE-2023-29827

Vulnerability Description

Vulnerability Details

Discussion (0)

Add Comment