Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/njs_vm.c function.
References
| Link | Resource |
|---|---|
| https://github.com/nginx/njs/issues/188 | Exploit Issue Tracking Patch |
| https://github.com/nginx/njs/issues/188 | Exploit Issue Tracking Patch |
Configurations
History
12 Aug 2025, 18:09
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:nginx:njs:2019-06-27:*:*:*:*:*:*:* |
cpe:2.3:a:f5:njs:*:*:*:*:*:*:*:* |
| First Time |
F5 njs
F5 |
21 Nov 2024, 05:09
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-04 15:15
Updated : 2025-08-12 18:09
NVD link : CVE-2020-19695
Mitre link : CVE-2020-19695
CVE.ORG link : CVE-2020-19695
JSON object : View
Products Affected
f5
- njs
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')