cve/2024/CVE-2024-33883.md

CVE-2024-33883

Description

The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection.

POC

Reference

No PoCs from references.

Github

• https://github.com/0x0806/JWT-Security-Assessment
• https://github.com/Grantzile/PoC-CVE-2024-33883
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/seal-community/patches