Miggo Logo
Miggo Vulnerability Database
→
CVE-2022-2837

CVE-2022-2837: coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints

6.1

CVSS Score
3.1

Basic Information

CVE ID
CVE-2022-2837
GHSA ID
GHSA-h828-v5pv-33qx
EPSS Score
0.33422%
CWE
CWE-601
Published
3/3/2023
Updated
3/14/2023
KEV Status
No
Technology
TechnologyGo

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
github.com/coredns/corednsgo<= 1.9.3

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

* *l*w w*s *oun* in *or**NS. T*is *l*w *llows * m*li*ious us*r to r**ir**t tr***i* int*n*** *or *xt*rn*l top-l*v*l *om*ins (TL*) to * po* t**y *ontrol *y *r**tin* proj**ts *n* n*m*sp***s t**t m*t** t** TL*.

Reasoning

No *n*lysis *v*il**l*