Описание
ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1.14.0-0ubuntu1.10 |
| devel | not-affected | 1.18.0-6ubuntu8 |
| esm-infra-legacy/trusty | needed | |
| esm-infra/bionic | released | 1.14.0-0ubuntu1.10 |
| esm-infra/focal | released | 1.18.0-0ubuntu1.3 |
| esm-infra/xenial | released | 1.10.3-0ubuntu0.16.04.5+esm3 |
| focal | released | 1.18.0-0ubuntu1.3 |
| groovy | ignored | end of life |
| hirsute | not-affected | 1.18.0-6ubuntu8 |
| impish | not-affected | 1.18.0-6ubuntu8 |
Показывать по
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3
Связанные уязвимости
ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header.
ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty ...
ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header.
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3