Launchpad.net

CVE 2022-4886

Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.

CVE-2022-4886 (Candidate) is related to these bugs:

Bug #2042977: Mitigate CVE-2022-4886, CVE-2023-5043 and CVE-2023-5044 for ingress-nginx

Summary				In	Importance	Status
	2042977	Mitigate CVE-2022-4886, CVE-2023-5043 and CVE-2023-5044 for ingress-nginx		StarlingX	High	Fix Released

See the

CVE page on Mitre.org for more details.