High severity8.8NVD Advisory· Published Oct 25, 2023· Updated Jun 17, 2026
CVE-2022-4886
CVE-2022-4886
Description
Ingress-nginx path sanitization can be bypassed with log_format directive.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
k8s.io/ingress-nginxGo | < 1.8.0 | 1.8.0 |
Affected products
18cpe:2.3:a:kubernetes:ingress-nginx:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:kubernetes:ingress-nginx:*:*:*:*:*:*:*:*range: <1.8.0
- (no CPE)range: 0
- osv-coords16 versionspkg:apk/chainguard/ingress-nginx-controllerpkg:apk/chainguard/ingress-nginx-controller-1.9pkg:apk/chainguard/ingress-nginx-controller-compatpkg:apk/chainguard/ingress-nginx-controller-compat-1.9pkg:apk/chainguard/ingress-nginx-controller-compat-fips-1.9pkg:apk/chainguard/ingress-nginx-controller-fipspkg:apk/chainguard/ingress-nginx-controller-fips-1.9pkg:apk/chainguard/ingress-nginx-controller-fips-compatpkg:apk/chainguard/kube-webhook-certgenpkg:apk/chainguard/kube-webhook-certgen-1.9pkg:apk/chainguard/kube-webhook-certgen-fipspkg:apk/chainguard/kube-webhook-certgen-fips-1.9pkg:apk/wolfi/ingress-nginx-controllerpkg:apk/wolfi/ingress-nginx-controller-compatpkg:apk/wolfi/kube-webhook-certgenpkg:golang/k8s.io/ingress-nginx
< 0+ 15 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.8.0
Patches
Vulnerability mechanics
References
7- www.openwall.com/lists/oss-security/2023/10/25/5nvdMailing ListThird Party AdvisoryWEB
- github.com/advisories/GHSA-gvrm-w2f9-f77qghsaADVISORY
- github.com/kubernetes/ingress-nginx/issues/10570nvdMitigationVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2022-4886ghsaADVISORY
- groups.google.com/g/kubernetes-security-announce/c/ge7u3qCwZLInvdMailing ListMitigationWEB
- security.netapp.com/advisory/ntap-20240307-0013ghsaWEB
- security.netapp.com/advisory/ntap-20240307-0013/nvd
News mentions
0No linked articles in our index yet.