imPC@ndo IT

Tracker / CVE-2021-46463

CVE-2021-46463

Critical 9.8

njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type Confusion vulnerability in njs_promise_perform_then().

Affected products and versions

f5 njs · … → 0.7.1

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References