Medium severity6.5NVD Advisory· Published Apr 21, 2022· Updated Jun 17, 2026

CVE-2021-23055

Description

On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ingress Controller does not apply to Ingress objects. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

NGINX/NGINX Ingress Controllerdescription
Nginx/NGINX Ingress Controllerllm-fuzzy
Range: <2.0.3, <1.12.3
osv-coords
pkg:bitnami/nginx-ingress-controller
Range: >= 1.0.0, < 1.12.3

Patches

Vulnerability mechanics

References

support.f5.com/csp/article/K01051452nvdMitigationVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000