Vulnerabilities > CVE-2022-27007 - Use After Free vulnerability in F5 NJS 0.7.2

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
f5
CWE-416

Summary

nginx njs 0.7.2 is affected suffers from Use-after-free in njs_function_frame_alloc() when it try to invoke from a restored frame saved with njs_function_frame_save().

Vulnerable Configurations

Part Description Count
Application
F5
1

Common Weakness Enumeration (CWE)