CVE-2021-23055

2022-04-2118:14:01

CWE-732

www.cve.org

nginx ingress controller

command line restriction

bypass

EPSS

0.001

Percentile

28.4%

JSON

On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ingress Controller does not apply to Ingress objects. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CNA Affected

[
  {
    "product": "NGINX Ingress Controller",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2.x before 2.0.3 and 1.x before 1.12.3"
      }
    ]
  }
]

References

support.f5.com/csp/article/K01051452

EPSS

0.001

Percentile

28.4%

JSON

Related for CVELIST:CVE-2021-23055