CVE-2020-24349

njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c

published August 13, 2020

CVSS
—
EPSS
1%
Percentile
44.3
In the wild
Unconfirmed
What it is

njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c. NOTE: the vendor considers the issue to be "fluff" in the NGINX use case because there is no remote attack surface.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00535 · 44.3th percentile
Published
2020-08-13T18:51Z
EPSS history
Timeline
  • 13 AUG 18:51Z
    njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c
    cvelistv5