CVE-2022-0484

Lack of validation of URLs causes Mirantis Container Cloud Lens Extension before v3.1.1 to open external programs other than the default browser to perform sign on to a new cluster. An attacker could host a webserver which serves a malicious Mirantis Container Cloud configuration file and induce...

CVE-2022-0484

Mirantis Container Cloud Lens Extension is affected by CVE-2022-0484 due to lack of URL validation, causing the extension to open external programs instead of the default browser when signing into a new cluster. Affected product/version: Mirantis Container Cloud Lens Extension v3.x prior to v3.1....

CVE-2022-0484 Improper URL Validation causes Mirantis Container Cloud Lens Extension to open external programs

Lack of validation of URLs causes Mirantis Container Cloud Lens Extension before v3.1.1 to open external programs other than the default browser to perform sign on to a new cluster. An attacker could host a webserver which serves a malicious Mirantis Container Cloud configuration file and induce...