← All advisories

High severityNVD Advisory· Published Jun 22, 2022· Updated Aug 3, 2024

CVE-2022-34296

CVE-2022-34296

Description

In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/zalando/skipperGo	< 0.13.218	0.13.218

Affected products

2

Zalando/Skippercpe-rescue
ghsa-coords
pkg:golang/github.com/zalando/skipper
Range: < 0.13.218

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-qx2j-85q5-ffp8ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-34296ghsaADVISORY
github.com/zalando/skipper/commit/998a658ce5a68a336a98f4e63e4371e200860dfcghsaWEB
github.com/zalando/skipper/pull/2028ghsaWEB
github.com/zalando/skipper/releases/tag/v0.13.218ghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.