CVE-2022-0484

    Dashboard / Vulnerabilities / CVE-2022-0484

    CVE-2022-0484

    Published: 4 Feb 2022Last Modified: 20 Oct 2026

    Summary:

    Details: Lack of validation of URLs causes Mirantis Container Cloud Lens Extension before v3.1.1 to open external programs other than the default browser to perform sign on to a new cluster. An attacker could host a webserver which serves a malicious Mirantis Container Cloud configuration file and induce the victim to add a new cluster via its URL. This issue affects: Mirantis Mirantis Container Cloud Lens Extension v3 versions prior to v3.1.1.

    References: https://github.com/Mirantis/security/blob/main/advisories/0005.md

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- ffe4e665923a610f72253d63b347357f4b4a3c53
    Fixed -4315713279d8a5e5f1a64c570a5b1aae298ca5c6

    Affected versions

    v3.1.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-0484 | CVE-DB