CVE-2020-36309

Publication date

2021-04-06 17:32:45

Family

mitre

State

PUBLISHED

Description

ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header.