CVE-2022-4886
CVE-2022-4886 · Ingress-nginx `path` sanitization can be bypassed with `log_format` directive
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.
CVSS 8.8 · High · EPSS 1.6% · Fix available
- Published
- Updated
Stack: containers
Affected products and versions
ingress-nginx
- Versions
- ≥ 0, < 1.8.0: Affected (semver)
- 1.8.0: Unknown
Update to 1.8.0