CVE-2020-24349 | BDVDB-2026-140141 Detail

Description#

njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c. NOTE: the vendor considers the issue to be "fluff" in the NGINX use case because there is no remote attack surface.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://cwe.mitre.org/data/definitions/416.html
https://github.com/nginx/njs/issues/324
https://security.netapp.com/advisory/ntap-20200918-0001/

Exploit#

No public exploit known

History#

Version 12020-08-13Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.