PT-2024-4417 · Ejs+3 · Ejs+3

Published 2024-04-28 · Updated 2024-08-09 · CVE-2024-33883

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ejs versions prior to 3.1.10

Description The issue is related to the lack of certain pollution protection in the ejs package, which can be exploited to execute arbitrary code by injecting specially crafted JavaScript code. This can be done by a remote attacker through the template engine's output. The estimated number of potentially affected devices is not specified.

Recommendations For versions prior to 3.1.10, upgrade the ejs package to version 3.1.10 or later to mitigate the issue. As a temporary workaround, consider restricting the use of the ejs template engine until a patch is applied. Avoid using the ejs package for rendering untrusted input until the issue is resolved.

Exploit

Fix

Protection Mechanism Failure

Prototype Pollution

Special Elements Injection

Weakness Enumeration

CWE-693

CWE-1321

CWE-74

Related Identifiers

BDU:2024-04916

CVE-2024-33883

GHSA-GHR5-CH3P-VCR6

Affected Products

Astra Linux

Debian

Red Os

Ejs

References · 19

• 🔥 https://github.com/Grantzile/PoC-CVE-2024-33883 · Exploit
• https://bdu.fstec.ru/vul/2024-04916 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/709245 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-33883 · Security Note
• https://osv.dev/vulnerability/CVE-2024-33883 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-33883 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-33883 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-33883 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-ghr5-ch3p-vcr6 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-33883 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-33883 · Vendor Advisory
• https://github.com/mde/ejs/commit/e469741dca7df2eb400199e1cdb74621e3f89aa5 · Note
• https://github.com/mde/ejs/compare/v3.1.9...v3.1.10 · Note
• https://github.com/mde/ejs · Note