CVE-2022-34296

    Dashboard / Vulnerabilities / CVE-2022-34296

    CVE-2022-34296

    Published: 22 Jun 2022Last Modified: 12 Aug 2026

    Summary:

    Details: In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request.

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Affected versions

    v0.13.217
    v0.13.216
    v0.13.215
    v0.13.213
    v0.13.212
    v0.13.211
    v0.13.210
    v0.13.209
    v0.13.208
    v0.13.207
    v0.13.206
    v0.13.205
    v0.13.204
    v0.13.203
    v0.13.202
    v0.13.201
    v0.13.200
    v0.13.199
    v0.13.198
    v0.13.197
    v0.13.196
    v0.13.195
    v0.13.194
    v0.13.193
    v0.13.192
    v0.13.191
    v0.13.190
    v0.13.189
    v0.13.188
    v0.13.187
    v0.13.186
    v0.13.185
    v0.13.184
    v0.13.183
    v0.13.182
    v0.13.181
    v0.13.180
    v0.13.179
    v0.13.178
    v0.13.177
    v0.13.176
    v0.13.175
    v0.13.174
    v0.13.173
    v0.13.172
    v0.13.171
    v0.13.170
    v0.13.169
    v0.13.168
    v0.13.167
    v0.13.166
    v0.13.165
    v0.13.164
    v0.13.163
    v0.13.162
    v0.13.161
    v0.13.160
    v0.13.159
    v0.13.158
    v0.13.157
    v0.13.156
    v0.13.155
    v0.13.154
    v0.13.153
    v0.13.152
    v0.13.151
    v0.13.150
    v0.13.149
    v0.13.148
    v0.13.147
    v0.13.146
    v0.13.145
    v0.13.144
    v0.13.143
    v0.13.142
    v0.13.141
    v0.13.140
    v0.13.139
    v0.13.138
    v0.13.137
    v0.13.136
    v0.13.135
    v0.13.134
    v0.13.132
    v0.13.133
    v0.13.131
    v0.13.130
    v0.13.129
    v0.13.128
    v0.13.127
    v0.13.126
    v0.13.125
    v0.13.124
    v0.13.123
    v0.13.122
    v0.13.121
    v0.13.120
    v0.13.119
    v0.13.118
    v0.13.117
    v0.13.116
    v0.13.115
    v0.13.114
    v0.13.113
    v0.13.112
    v0.13.111
    v0.13.110
    v0.13.109
    v0.13.108
    v0.13.107
    v0.13.106
    v0.13.105
    v0.13.104
    v0.13.103
    v0.13.102
    v0.13.101
    v0.13.100
    v0.13.99
    v0.13.98
    v0.13.97
    v0.13.96
    v0.13.95
    v0.13.94
    v0.13.93
    v0.13.92
    v0.13.91
    v0.13.90
    v0.13.89
    v0.13.88
    v0.13.87
    v0.13.86
    v0.13.85
    v0.13.84
    v0.13.83
    v0.13.82
    v0.13.81
    v0.13.80
    v0.13.79
    v0.13.78
    v0.13.77
    v0.13.76
    v0.13.75
    v0.13.74
    v0.13.73
    v0.13.72
    v0.13.71
    v0.13.70
    v0.13.69
    v0.13.68
    v0.13.67
    v0.13.66
    v0.13.65
    v0.13.64
    v0.13.63
    v0.13.62
    v0.13.61
    v0.13.60
    v0.13.59
    v0.13.58
    v0.13.57
    v0.13.56
    v0.13.55
    v0.13.54
    v0.13.53
    v0.13.52
    v0.13.51
    v0.13.50
    v0.13.49
    v0.13.48
    v0.13.47
    v0.13.46
    v0.13.45
    v0.13.44
    v0.13.43
    v0.13.42
    v0.13.41
    v0.13.40
    v0.13.39
    v0.13.38
    v0.13.36
    v0.13.37
    v0.13.35
    v0.13.34
    v0.13.33
    v0.13.32
    v0.13.31
    v0.13.30
    v0.13.29
    v0.13.28
    v0.13.27
    v0.13.26
    v0.13.25
    v0.13.24
    v0.13.23
    v0.13.22
    v0.13.21
    v0.13.20
    v0.13.19
    v0.13.18
    v0.13.17
    v0.13.16
    v0.13.15
    v0.13.14
    v0.13.13
    v0.13.12
    v0.13.11
    v0.13.10
    v0.13.9
    v0.13.8
    v0.13.7
    v0.13.6
    v0.13.5
    v0.13.4
    v0.13.3
    v0.13.2
    v0.13.1
    v0.13.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-34296 | CVE-DB