Vulnerability CVE-2023-29827


Published: 2023-05-04

Description:
ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter.

 References:
https://github.com/mde/ejs/issues/720

Copyright 2026, cxsecurity.com

 

Back to Top