CVE-2022-3962
CVSS V2 None
CVSS V3 None
Description
A content spoofing vulnerability was found in Kiali. It was discovered that Kiali does not implement error handling when the page or endpoint being accessed cannot be found. This issue allows an attacker to perform arbitrary text injection when an error response is retrieved from the URL being accessed.
Overview
- CVE ID
- CVE-2022-3962
- Assigner
- redhat
- Vulnerability Status
- PUBLISHED
- Published Version
- 2023-09-23T19:00:54.200Z
- Last Modified Date
- 2024-05-03T15:32:26.058Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://access.redhat.com/errata/RHSA-2023:0542 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/security/cve/CVE-2022-3962 | vdb-entry x_refsource_REDHAT |
| https://bugzilla.redhat.com/show_bug.cgi?id=2148661 | issue-tracking x_refsource_REDHAT |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2022-3962 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3962 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-24 16:48:06 | Added to TrackCVE |