cve/CVE-2017-1000228.md at 9ac4b787af2fa0b7575b28040edee6199ce9a667 - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-05-28 01:04:30 +00:00

0xMarcio 49bdc782b3 Update Sun May 26 14:27:04 CEST 2024

2024-05-26 14:27:05 +02:00

691 B

Raw Blame History

CVE-2017-1000228

Description

nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile() function

POC

Reference

No PoCs from references.

Github