writeups.xyz / Finding RCE in NodeJS templating engine 'Eta' - CVE-2022-25967

Submitter : c2a

Date: 1 April 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Server-Side Prototype Pollution
• Security Code Review

Programs :

• Eta

Authors :

• Rayhan Ahmed Niloy (@Rayhan0x01)

Link :
https://rayhan0x01.github.io/ctf/2023/04/01/finding-rce-in-eta-cve-2022-25967.html