Security Advisory

CVE-2022-23008

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-01-25 19:11:19

Last updated 2024-08-03 03:28:42

Assigner f5

CVSS score not scored

State PUBLISHED

Description

On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the "user" or "admin" role can use undisclosed API endpoints on NGINX Controller API Management to inject JavaScript code that is executed on managed NGINX data plane instances. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

← Browse all CVEs View on cve.org ↗