Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2023-29827
CVE-2023-29827:
Linux Debian vulnerability analysis and mitigation
Overview
EJS version 3.1.9 was reported to be vulnerable to server-side template injection through the configuration settings of the closeDelimiter parameter when the EJS file is controllable. This vulnerability is identified as CVE-2023-29827. However, this vulnerability is disputed by the vendor because the render function is not intended to be used with untrusted input (NVD, CVE).
Technical details
The vulnerability has been assigned a CVSS v3.1 Base Score of 9.8 (CRITICAL) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. The vulnerability is classified under CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')). The issue specifically involves the potential for template injection through manipulation of the closeDelimiter parameter in the configuration settings (NVD).
Impact
If successfully exploited, this vulnerability could allow an attacker to perform server-side template injection when the EJS file is controllable. This could potentially lead to code execution on the affected system (GitHub Issue).
Mitigation and workarounds
The vendor has clarified that this is considered out-of-scope as the EJS render method should not be used with untrusted input. According to the security policy, giving end-users unfettered access to the EJS render method is considered an inherently insecure way of using EJS. Users should implement proper input validation before passing data to the render method (Security Policy).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management