CVE-2022-0484CWE-20

Improper URL Validation causes Mirantis Container Cloud Lens Extension to open external programs

High · published February 4, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
62.2
In the wild
Unconfirmed
What it is

Lack of validation of URLs causes Mirantis Container Cloud Lens Extension before v3.1.1 to open external programs other than the default browser to perform sign on to a new cluster. An attacker could host a webserver which serves a malicious Mirantis Container Cloud configuration file and induce the victim to add a new cluster via its URL. This issue affects: Mirantis Mirantis Container Cloud Lens Extension v3 versions prior to v3.1.1.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00997 · 62.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-02-04T22:29Z
EPSS history
Timeline
  • 04 FEB 22:29Z
    Improper URL Validation causes Mirantis Container Cloud Lens Extension to open external programs
    cvelistv5