Description
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile() function
Remediation
References
http://www.securityfocus.com/bid/101897
https://snyk.io/vuln/npm:ejs:20161128
Related Vulnerabilities
CVE-2020-6422 Vulnerability in npm package electron
CVE-2018-3726 Vulnerability in npm package crud-file-server
CVE-2020-9483 Vulnerability in maven package org.apache.skywalking:server-storage-plugin
CVE-2017-16105 Vulnerability in npm package serverwzl
CVE-2017-1000487 Vulnerability in maven package org.codehaus.plexus:plexus-utils