Segmentation Violation in Nginx NJS JavaScript Module Activating Credential Exposure
CVE-2022-31307
5.5MEDIUM
Summary
A segmentation violation was identified in Nginx's NJS JavaScript module version 0.7.2, specifically within the 'njs_string_offset' function. This flaw can lead to unexpected behavior, potentially allowing an attacker to expose sensitive information or disrupt services. It is crucial for users of this module to review their implementations and apply any available patches promptly to safeguard against potential exploitation.
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved