CVE-2017-1000189: Input Validation
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in ejs.renderFile()
Other sources
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile()
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2017-1000189?
CVE-2017-1000189 is a vulnerability in nodejs ejs version older than 2.5.5, which allows for a denial-of-service attack due to weak input validation in the ejs.renderFile() function.
What is the severity of CVE-2017-1000189?
The severity of CVE-2017-1000189 is high, with a severity score of 7.5.
How do I fix CVE-2017-1000189?
To fix CVE-2017-1000189, update your nodejs ejs package to version 2.5.5 or newer.
Where can I find more information about CVE-2017-1000189?
You can find more information about CVE-2017-1000189 on the NVD (National Vulnerability Database) website and the GitHub advisory page.
What is CWE-20?
CWE-20 is a common weakness enumeration category that refers to input validation vulnerabilities.