CVE-2022-4886 Ingress-nginx `path` sanitization can be bypassed with `log_format` directive

Description

Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
ingress-nginx 1.8	premières → < 1.8.0	1.8.0

Autres CVE de ingress-nginx

Les 18 CVE de ingress-nginx →

CVE-2026-116472 ingress-nginx mirror-target self-DOS 2.7 Faible CVE-2026-4342 A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject… 8.8 Élevée CVE-2026-3288 A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress… 8.8 Élevée CVE-2025-15566 A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers`… 8.8 Élevée