CVE-2022-34296

CVE-2022-34296 affects the Zalando Skipper HTTP router/reverse proxy. In Skipper versions before 0.13.218, a flaw allows bypass of a query predicate via a prepared request, due to insufficient escaping/validation of application query predicates. This could enable an attacker to bypass predicate c...

CVE-2022-34296

In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request...

PT-2022-22112 · Zalando · Zalando Skipper

Name of the Vulnerable Software and Affected Versions: Zalando Skipper versions prior to 0.13.218 Description: A query predicate could be bypassed via a prepared request. Recommendations: For versions prior to 0.13.218, update to version 0.13.218 or later to resolve the issue...

CVE-2022-34296: Undefined Security Weakness

In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request...

Securing REST with free API Firewall. How-to guide

In our modern world, web applications are becoming ever more important. Bad actors know this and they target them more frequently than ever before. This is not likely to stop any time soon as the number of web applications the world needs will only go up with its reliance on technology. To fully...

creativefactory.zalando.de Open Redirect vulnerability

Open Bug Bounty ID: OBB-692829 Description| Value ---|--- Affected Website:| creativefactory.zalando.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

zalando.de XSS vulnerability

Open Bug Bounty ID: OBB-572262 Description| Value ---|--- Affected Website:| zalando.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Zalando – Shopping & Fashion - Exported components, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application Zalando – Shopping & Fashion published at the 'play' market has multiple vulnerabilities...