Skip to main content
Version: v1.1.x

CVE-2022-4886

CVE Details

Visit the official vulnerability details page for CVE-2022-4886 to learn more.

Initial Publication

10/25/2023

Last Update

02/13/2025

Third Party Dependency

k8s.io/ingress-nginx

NIST CVE Summary

Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.

CVE Severity

8.8

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects our products.

Status

Modified

Affected Products & Versions

VersionPaletteAIPaletteAI VerteX
1.0.7⚠️ Impacted⚠️ Impacted

Revision History

No revisions available.