CVE PROGRAM SOURCE RECORDUnscored
CVE-2017-1000188
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection
- Status
- Published
- Published
- Updated
- Assigning organization
- mitre
Description
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.