vciy

CVE-2022-23469 · Brief

CVEs like CVE-2022-23469

The records whose text reads closest to CVE-2022-23469, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

  1. Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or…

    Same weakness class, CWE-200 (information exposure).

  2. Headscale through 0.22.3 writes bearer tokens to info-level logs.

    Related weakness classes, CWE-200 is above CWE-532.

  3. Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could…

    Same weakness class, CWE-200 (information exposure).

  4. Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is…

    Same vendor or product family, traefik.

  5. A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to…

    Same weakness class, CWE-200 (information exposure).

  6. Traefik: Gateway HTTPRoute backendRef filters can leak backend context across routes sharing a Service:port

    Same vendor or product family, traefik.

  7. Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing…

    Same vendor or product family, traefik.

  8. Traefik: BasicAuth Middleware Timing Attack Allows Username Enumeration

    Related weakness classes, CWE-200 is above CWE-208; same vendor or product family, traefik.

  9. Traefik: BasicAuth middleware: timing side-channel vulnerability

    Related weakness classes, CWE-200 is above CWE-208; same vendor or product family, traefik.

  10. Traefik before 3.7.7 Namespace Confusion via HTTPRoute ExtensionRef

    Same vendor or product family, traefik.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-11-02.