HIGH 8.8 Go
Ingress-nginx path sanitization can be bypassed
GHSA-gvrm-w2f9-f77q · CVE-2022-4886
Published · Modified
Description
Ingress-nginx path sanitization can be bypassed with log_format directive.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2022-4886
- WEB https://github.com/kubernetes/ingress-nginx/issues/10570
- PACKAGE https://github.com/kubernetes/ingress-nginx
- WEB https://groups.google.com/g/kubernetes-security-announce/c/ge7u3qCwZLI
- WEB https://security.netapp.com/advisory/ntap-20240307-0013
- WEB http://www.openwall.com/lists/oss-security/2023/10/25/5
Ready to move
Start Securing
Free, no credit card | First findings in minutes