CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It affects Nginx, Java. Exploitation may require the attacker to be authenticated.
CVE
CVE-2022-23008
Severity
MEDIUM
CVSS
5.4
EPSS
0.53%
Nginx Java
Original NVD Description
On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the "user" or "admin" role can use undisclosed API endpoints on NGINX Controller API Management to inject JavaScript code that is executed on managed NGINX data plane instances. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Related CVEs
Other vulnerabilities affecting the same vendor(s)