Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gv5c-89fp-pfpj

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c. NOTE: the vendor considers the issue to be "fluff" in the NGINX use case because there is no remote attack surface.

njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c. NOTE: the vendor considers the issue to be "fluff" in the NGINX use case because there is no remote attack surface.

EPSS

Процентиль: 18%
0.00057
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-20
CWE-416

Связанные уязвимости

CVSS3: 5.5
nvd
больше 5 лет назад

njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c. NOTE: the vendor considers the issue to be "fluff" in the NGINX use case because there is no remote attack surface.

EPSS

Процентиль: 18%
0.00057
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-20
CWE-416