CVE-2020-24346
published 2020-08-13CVE-2020-24346: njs through 0.4.3, used in NGINX, has a use-after-free in njs_json_parse_iterator_call in njs_json.c.
high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
njs through 0.4.3, used in NGINX, has a use-after-free in njs_json_parse_iterator_call in njs_json.c.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | njs | <= 0.4.3 | — |