3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and possibly gain access to sensitive information or conduct further attacks.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2022-1414 | Vendor Advisory |
| https://access.redhat.com/security/cve/CVE-2022-1414 | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2076794 | Issue Tracking Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2076794 | Issue Tracking Vendor Advisory |
Configurations
History
09 May 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2076794 - Issue Tracking, Vendor Advisory | |
| References | () https://access.redhat.com/security/cve/CVE-2022-1414 - Vendor Advisory |
Information
Published : 2022-10-19 18:15
Updated : 2025-05-09 15:15
NVD link : CVE-2022-1414
Mitre link : CVE-2022-1414
JSON object : View
Products Affected
redhat
- 3scale_api_management
CWE
CWE-20
Improper Input Validation