CVE-2022-27007

Name of the Vulnerable Software and Affected Versions nginx njs version 0.7.2

Description The issue is related to a Use-after-free in the njs function frame alloc() function when it tries to invoke from a restored frame saved with njs function frame save(). This can allow a remote attacker to impact the confidentiality, integrity, and availability of information.

Recommendations For nginx njs version 0.7.2, as a temporary workaround, consider disabling the njs function frame alloc() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.