Ingress-nginx path sanitization can be bypassed

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products1

• go/k8s.io/ingress-nginx:< 1.8.0

🔗 References (6)

• https://nvd.nist.gov/vuln/detail/CVE-2022-4886
• https://github.com/kubernetes/ingress-nginx/issues/10570
• https://groups.google.com/g/kubernetes-security-announce/c/ge7u3qCwZLI
• http://www.openwall.com/lists/oss-security/2023/10/25/5
• https://security.netapp.com/advisory/ntap-20240307-0013
• https://github.com/advisories/GHSA-gvrm-w2f9-f77q