Approved changes feed: RSS · Atom

cpe:2.3:a:kiali:kiali:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorKiali (836f3aab-d218-5e56-8af3-0bed5361a7f6)
ProductKiali (6a00baef-3b2a-559f-a126-7b7bc21c4f6b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/kiali/kiali purl2cpe 2026-06-01 10:11:10.363904
pkg:github/kiali/kiali purl2cpe 2026-06-01 10:11:10.363907

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3962 vulnerable 2026-06-08 05:48:22.707737 Kiali: error message spoofing in kiali ui
MEDIUM (4.3)
A content spoofing vulnerability was found in Kiali. It was discovered that Kiali does not implement error handling when the page or endpoint being accessed cannot be found. This issue allows an attacker to perform arbitrary text injection when an error response is retrieved from the URL being accessed.
Published: 2023-09-23T19:00:54.200Z
Updated: 2024-08-03T01:27:53.126Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.