Privilege Escalation

2022-05-0802:04:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

70.1%

JSON

njs is vulnerable to privilege escalation. The vulnerability exists in njs_promise_perform_then function due to a type confusion which allows an attacker to gain access to the system and perform unauthorized actions.

CPENameOperatorVersion
njs:edgeeq0.7.1-r0
njs:edgeeq0.6.1-r0
njs:edgeeq0.6.2-r0
njs:edgeeq0.7.0-r0
njs:edgeeq0.5.2-r0
njs:edgeeq0.6.0-r0
njs:3.15eq0.7.0-r0
nginx:edgeeq1.20.1-r5
nginx:edgeeq1.20.1-r9
nginx:edgeeq1.20.1-r7

Name	Operator	Version
njs:edge	eq	0.7.1-r0
njs:edge	eq	0.6.1-r0
njs:edge	eq	0.6.2-r0
njs:edge	eq	0.7.0-r0
njs:edge	eq	0.5.2-r0
njs:edge	eq	0.6.0-r0
njs:3.15	eq	0.7.0-r0
nginx:edge	eq	1.20.1-r5
nginx:edge	eq	1.20.1-r9
nginx:edge	eq	1.20.1-r7