CVE-2022-4886
1 advisory.
Go/k8s.io/ingress-nginx CVE-2022-4886: high 8.8, EPSS 1.55%
Ingress-nginx path sanitization can be bypassed
Action: Upgrade k8s.io/ingress-nginx to 1.8.0 or later.
go get k8s.io/ingress-nginx@v1.8.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.0 | - |
Fixed versions
| 1.8.0 |
Sources
- osv: GHSA-gvrm-w2f9-f77q
- https://nvd.nist.gov/vuln/detail/CVE-2022-4886
- https://github.com/kubernetes/ingress-nginx/issues/10570
- https://github.com/kubernetes/ingress-nginx
- https://groups.google.com/g/kubernetes-security-announce/c/ge7u3qCwZLI
- https://security.netapp.com/advisory/ntap-20240307-0013
- http://www.openwall.com/lists/oss-security/2023/10/25/5
CVE-2022-4886 · published · modified · JSON