writeups.xyz / EJS, Server side template injection RCE (CVE-2022-29078) - writeup

Submitter : c2a

Date: 23 April 2022

Bounty : undisclosed

Vulnerabilities :

• SSTI
• RCE

Programs :

• Ejs
• NetApp

Authors :

• Eslam Salem (@Net_code)

Link :
https://eslam.io/posts/ejs-server-side-template-injection-rce/