CVE-2022-0484

8.8 highEPSS 1.0%

Lack of validation of URLs causes Mirantis Container Cloud Lens Extension before v3.1.1 to open external programs other than the default browser to perform sign on to a new cluster. An attacker could host a webserver which serves a malicious Mirantis Container Cloud configuration file and induce the victim to add a new cluster via its URL. This issue affects: Mirantis Mirantis Container Cloud Lens Extension v3 versions prior to v3.1.1.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2022-02-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mirantis:container_cloud_lens_extension

References

https://github.com/Mirantis/security/blob/main/advisories/0005.md
https://github.com/Mirantis/security/blob/main/advisories/0005.md

Check your stack JSON