CVE-2021-23055

6.5 mediumEPSS 0.8%

Medium (6.5) in f5 nginx ingress controller. EPSS 0.8% chance of exploitation in the next 30 days.

On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ingress Controller does not apply to Ingress objects. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2022-04-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

f5:nginx_ingress_controller

References

https://support.f5.com/csp/article/K01051452
https://support.f5.com/csp/article/K01051452

Check your stack JSON