CVE-2022-34296 - In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request

HIGH

In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request

Published Jun 22, 2022

7.5

HIGH

CVSS 3.1

EPSS 1.15%

In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request.

Ecosystem	Package	Introduced	Fixed
Go	github.com/zalando/skipper	0	0.13.218

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-6139		Advisory
https://github.com/advisories/GHSA-qx2j-85q5-ffp8		Advisory
https://github.com/zalando/skipper/commit/998a658ce5a68a336a98f4e63e4371e200860dfc
https://github.com/zalando/skipper/pull/2028
https://github.com/zalando/skipper/releases/tag/v0.13.218		x_refsource_MISCExploitPatchRelease NotesThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-34296