Approved changes feed: RSS · Atom

cpe:2.3:a:mirantis:container_cloud_lens_extension:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMirantis (786f50af-c7f6-5fbd-8d85-a0b5db256966)
ProductContainer Cloud Lens Extension (914d0b96-61a5-5f9d-b339-61a5df69958f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/mirantis/lens-extension-cc purl2cpe 2026-06-01 10:15:06.126869
pkg:npm/%40mirantis/lens-extension-cc purl2cpe 2026-06-01 10:15:06.126873

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0484 vulnerable 2026-06-08 05:39:10.120835 Improper URL Validation causes Mirantis Container Cloud Lens Extension to open external programs
HIGH (8.8)
Lack of validation of URLs causes Mirantis Container Cloud Lens Extension before v3.1.1 to open external programs other than the default browser to perform sign on to a new cluster. An attacker could host a webserver which serves a malicious Mirantis Container Cloud configuration file and induce the victim to add a new cluster via its URL. This issue affects: Mirantis Mirantis Container Cloud Lens Extension v3 versions prior to v3.1.1.
Published: 2022-02-04T22:29:20.398Z
Updated: 2024-09-16T16:49:13.139Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.