CRITICAL

CVE-2023-29827

CVSS v3

9.8

CRITICAL

EPSS Score

80.8%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter. NOTE: this is disputed by the vendor because the render function is not intended to be used with untrusted input.

Technical details

Published
5/4/2023

Frequently asked questions

What is CVE-2023-29827?

ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter. NOTE: this is disputed by the vendor because the render function is not intended to be used with untrusted input.

Is CVE-2023-29827 actively exploited?

Active exploitation of CVE-2023-29827 has not been confirmed. The EPSS score is 80.8%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2023-29827?

CVE-2023-29827 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2023-29827 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.