PT-2025-18960 · Unknown · Fastify/View

Published 2025-05-03 · Updated 2025-05-15 · CVE-2025-47240

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions fastify/view (affected versions not specified)

Description The issue highlights the importance of securing template rendering engines and validating user input to prevent Remote Code Execution (RCE) attacks. It involves Remote Code Execution in fastify/view via raw EJS template injection, allowing full command execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-47240

Affected Products

Fastify/View

References · 9

• https://twitter.com/theoblivionsage/status/1918792002511991159 · Twitter Post
• https://t.me/four_rays/85 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1kg0pq8/top_10_trending_cves_06052025 · Reddit Post
• https://twitter.com/transilienceai/status/1918878963562115233 · Twitter Post
• https://twitter.com/cyber_advising/status/1919062160036024508 · Twitter Post
• https://twitter.com/theoblivionsage/status/1919413991832498278 · Twitter Post
• https://twitter.com/piedpiper1616/status/1918851522466574412 · Twitter Post
• https://twitter.com/transilienceai/status/1918878951851667764 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1kf7xj0/top_10_trending_cves_05052025 · Reddit Post