CVE-2022-4886
Assigner: kubernetes
Published: 2023-10-25T19:18:45.982Z
State: PUBLISHED
title: Ingress-nginx `path` sanitization can be bypassed with `log_format` directive
datePublic: 2023-10-25T16:30:00.000Z
problemTypes: descriptions: cweId: CWE-20
description: CWE-20: Improper Input Validation
type: CWE
impacts: capecId: CAPEC-233
descriptions: value: CAPEC-233 Privilege Escalation
affected: vendor: Kubernetes
product: ingress-nginx
repo: https://github.com/kubernetes/ingress-nginx
versions: status: affected
version: 0
lessThan: 1.8.0
versionType: semver
status: unknown
version: 1.8.0
defaultStatus: unknown
descriptions: value: Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.

supportingMedia: type: text/html
base64: no
value: Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.<br>
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
credits: value: Ginoah, working with the DEVCORE Internship Program
user: 00000000-0000-4000-9000-000000000000
type: reporter
source: discovery: EXTERNAL
x_generator: engine: Vulnogram 0.1.0-dev