Vulnerabilities > EJS > EJS > 2.4.2

DATE CVE VULNERABILITY TITLE RISK
2017-11-17 CVE-2017-1000228 Improper Input Validation vulnerability in EJS
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile() function
network
low complexity
ejs CWE-20
critical
 10.0
10
2017-11-17 CVE-2017-1000189 Improper Input Validation vulnerability in EJS
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile()
network
low complexity
ejs CWE-20
5.0
5.0
2017-11-17 CVE-2017-1000188 Cross-site Scripting vulnerability in EJS
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection
network
ejs CWE-79
4.3
4.3