Critical WID-SEC-2023-0860 2 CVEs

NGINX NJS: Mehrere Schwachstellen ermöglichen Codeausführung

Published Apr 4, 2023 · Updated Apr 4, 2023 · de-DE

Vendor: nginx Product: NGINX NJS v.0feca92 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NGINX NJS ausnutzen, um beliebigen Programmcode auszuführen.

Product

NGINX ist eine Webserver-, Reverse Proxy- und E-Mail-Proxy Software.

Vulnerabilities 2

Critical 9.8

CVE-2020-19695

Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property param…

nginx Azure Linux

Apr 4, 2023
Unscored —

CVE-2020-19692

Buffer Overflow vulnerabilty found in Nginx NJS v.0feca92 allows a remote attacker to execute arbitrary code via the nj…

nginx Azure Linux

Apr 4, 2023

Revision history

2023-04-04 #1
Initiale Fassung

References

Github Security Advisory vom 2023-04-04
https://github.com/advisories/GHSA-9m49-j2g8-82x8
Github Security Advisory vom 2023-04-04
https://github.com/advisories/GHSA-87wc-7p2c-x5h9