Eta vulnerable to Code Injection via templates rendered with user-defined data

高危 8.8CVE-2022-25967 · GHSA-mf6x-hrgr-658f · Published 30/01/2023 · updated 17/06/2026

要点

CVE-2022-25967 是影响 eta (eta.js), eta 的高危 (CVSS 8.8)漏洞。
未来 30 天内被利用的概率（EPSS）：2.0%，高于 80.8% 的漏洞。
修复：升级到 2.0.0 或更高版本。

Package	Affected versions	Patched versions
eta eta.js	`< 2.0.0`	`2.0.0`
eta npm	`< 2.0.0`	`2.0.0`

Description

Versions of the package eta before 2.0.0 are vulnerable to Remote Code Execution (RCE) by overwriting template engine configuration variables with view options received from The Express render API. Note: This is exploitable only for users who are rendering templates with user-defined data.

NVD description

Versions of the package eta before 2.0.0 are vulnerable to Remote Code Execution (RCE) by overwriting template engine configuration variables with view options received from The Express render API. **Note:** This is exploitable only for users who are rendering templates with user-defined data.

References

nvd.nist.gov/vuln/detail/CVE-2022-25967 · ADVISORY
eta-dev/eta commit 5651392 · WEB
eta-dev/eta · PACKAGE
eta-dev/eta · WEB
eta-dev/eta · WEB
security.snyk.io/vuln/SNYK-JS-ETA-2936803 · WEB

eta 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

eta

eta.js

< 2.0.0

2.0.0

eta

npm

< 2.0.0

2.0.0

Description

NVD description

Versions of the package eta before 2.0.0 are vulnerable to Remote Code Execution (RCE) by overwriting template engine configuration variables with view options received from The Express render API. **Note:** This is exploitable only for users who are rendering templates with user-defined data.