CVE-2020-36309

ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request…

published April 6, 2021

CVSS
—
EPSS
1%
Percentile
72.7
In the wild
Unconfirmed
What it is

ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01423 · 72.7th percentile
Published
2021-04-06T17:32Z
EPSS history
Timeline
  • 06 APR 17:32Z
    ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request…
    cvelistv5