PT-2020-15697

CVE-2020-24346

·

Published

2020-08-13

·

Updated

2022-04-15

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions njs versions through 0.4.3
Description The issue is related to a use-after-free in the njs json parse iterator call function in njs json.c. This affects njs, which is used in NGINX.
Recommendations For versions through 0.4.3, update to a version that contains a fix for this issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-416: Use After Free
Related identifiers
CVE-2020-24346
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com