{"containers": {"cna": {"providerMetadata": {"dateUpdated": "2022-05-04T09:10:08", "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "shortName": "@huntrdev"}, "rejectedReasons": [{"lang": "en", "value": "DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage"}]}}, "cveMetadata": {"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "assignerShortName": "@huntrdev", "cveId": "CVE-2022-1214", "datePublished": "2022-05-03T06:15:14", "dateRejected": "2022-05-04T09:10:08", "dateReserved": "2022-04-04T00:00:00", "dateUpdated": "2022-05-04T09:10:08", "state": "REJECTED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage"}], "id": "CVE-2022-1214", "lastModified": "2023-11-07T03:41:49.347", "metrics": {}, "published": "2022-05-03T07:15:06.900", "references": [], "sourceIdentifier": "security@huntr.dev", "vulnStatus": "Rejected"}

{"bugzilla": {"description": "axios: Exposure of Sensitive Information to an Unauthorized Actor", "id": "2082190", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2082190"}, "csaw": false, "cvss3": {"cvss3_base_score": "0.0", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N", "status": "draft"}, "cwe": "CWE-200", "details": ["[REJECTED CVE] A vulnerability has been identified in the axios library where cookies can be leaked to unauthorized domains during HTTP redirects. This occurs because axios includes the original Cookie header when following a Location redirect to a different domain, violating the same-origin policy. An attacker could exploit this by redirecting requests to their controlled domain, gaining access to sensitive cookies and potentially hijacking user accounts."], "name": "CVE-2022-1214", "public_date": "2022-01-05T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2022-1214\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-1214"], "statement": "This CVE has been rejected upstream: https://github.com/axios/axios/commit/c9aca7525703ab600eacd9e95fd7f6ecc9942616#commitcomment-72837858\nRed Hat has also evaluated this issue and determined that it does not meet the criteria to be classified as a security vulnerability. This assessment is based on the issue not posing a significant security risk, being a result of misconfiguration or usage error, or falling outside the scope of security considerations. \nAs such, this CVE has been marked as \"Rejected\" in alignment with Red Hat's vulnerability management policies.\nIf you have additional information or concerns regarding this determination, please contact Red Hat Product Security for further clarification."}