Denial-of-Service Vulnerability in Node.js EJS Version < 2.5.5

Denial-of-Service Vulnerability in Node.js EJS Version < 2.5.5

CVE-2017-1000189 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile()

Learn more about our Web Application Penetration Testing UK.