CVE-2020-24348
published 2020-08-13CVE-2020-24348: njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_json_stringify_iterator in njs_json.c.
medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_json_stringify_iterator in njs_json.c.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | njs | <= 0.4.3 | — |