CVE-2022-2238

Katalog CVE

CVSS 6.5 · Medium EPSS 0,92%

Kerentanan Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') pada redhat advanced cluster management for kubernetes. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in the search-api container in Red Hat Advanced Cluster Management for Kubernetes when a query in the search filter gets parsed by the backend. This flaw allows an attacker to craft specific strings containing special characters that lead to crashing the pod and affects system availability while restarting.

Rincian

Terbit di NVD

1 September 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

EPSS (30 hari)

0,92% peluang dieksploitasi; lebih tinggi dari 59,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2022-2238 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2101669 issue tracking · advisory vendor