Description
An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.
Remediation
References
https://docs.google.com/presentation/d/1W5KU7ffh4dheR8iD54ulABImi6byAhSI-OhEKw2adRo/edit?usp=sharing
Related Vulnerabilities
CVE-2022-4742 Vulnerability in npm package json-pointer
CVE-2022-32210 Vulnerability in maven package org.webjars.npm:undici
CVE-2020-19698 Vulnerability in maven package org.webjars.bowergithub.pandao:editor.md
CVE-2017-3164 Vulnerability in maven package org.apache.solr:solr-core
CVE-2022-38900 Vulnerability in npm package decode-uri-component