6 matches found
CVE-2022-25139
njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njsawaitfulfilled...
9.8CVSS7.3AI score0.01616EPSS
SaveExploits1References1
BELL-CVE-2022-25139 CVE-2022-25139 does not affect BellSoft software
Bulletin has no description...
9.8CVSS5.8AI score0.01616EPSS
SaveExploits1References1
CVE-2022-25139
njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njsawaitfulfilled...
9.8CVSS7.2AI score0.01616EPSS
SaveExploits1References4
CVE-2022-25139
CVE-2022-25139 affects njs up to version 0.7.0 (used in NGINX). The issue is a heap use-after-free in njs_await_fulfilled. CVSS metrics indicate High/CRITICAL impact across confidentiality, integrity, and availability (BASE scores: 7.5/9.8). The connected documents confirm the vulnerable componen...
9.8CVSS9.5AI score0.01616EPSS
SaveExploits1References3Affected Software1
20