Segmentation Violation in Nginx NJS v0.7.2v0.7.4 via njs_scope_valid_value
CVE-2022-43284 Published on October 28, 2022
Nginx NJS v0.7.2 to v0.7.4 was discovered to contain a segmentation violation via njs_scope_valid_value at njs_scope.h. NOTE: the vendor disputes the significance of this report because NJS does not operate on untrusted input.
Products Associated with CVE-2022-43284
stack.watch emails you whenever new vulnerabilities are published in F5 Networks Njs or NGINX Njs. Just hit a watch button to start following.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.