CVE-2022-28049

Description

References

• nginx/njs commit f65981b · Patch
• nginx/njs · Exploit
• security.netapp.com/advisory/ntap-20220519-0008 · Third Party Advisory

Autres vulnérabilités de njs

• CVE-2026-8711CRITIQUE 9.8NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for…
• CVE-2023-27730ÉLEVÉE 7.5Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_lvlhsh_find at src/njs_lvlhsh.c.
• CVE-2023-27729ÉLEVÉE 7.5Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return at src/njs_vmcode.c.
• CVE-2023-27728ÉLEVÉE 7.5Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_dump_is_recursive at src/njs_vmcode.c.
• CVE-2023-27727ÉLEVÉE 7.5Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_function_frame at src/njs_function.h.