Description
In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/zalando/skipper | < 0.13.218 | 0.13.218 | GHSA-qx2j-85q5-ffp8 |
High · 7.5
CVE-2022-34296
EUVD-2022-6139GHSA-qx2j-85q5-ffp8GO-2022-0494
Query predicate bypass in Zalando Skipper
Published Jun 22, 2022 · Updated Aug 3, 2024 · Assigned by mitre