UBUNTU-CVE-2022-29078
Dashboard / Vulnerabilities / UBUNTU-CVE-2022-29078
Summary:
Details: The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows server-side template injection in settings[view options][outputFunctionName]. This is parsed as an internal option, and overwrites the outputFunctionName option with an arbitrary OS command (which is executed upon template compilation).
References: https://ubuntu.com/security/CVE-2022-29078, https://eslam.io/posts/ejs-server-side-template-injection-rce/, https://github.com/mde/ejs/commit/15ee698583c98dadc456639d6245580d17a24baf, https://www.cve.org/CVERecord?id=CVE-2022-29078
Affected packages
Package
Name: node-ejs
Purl: pkg:deb/ubuntu/[email protected]?arch=source&distro=bionic
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -None
Affected versions
2.5.2-1
2.5.7-1
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
