CVE-2024-22200

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-22200
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-22200.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-22200
Aliases
  • GHSA-8wxq-346h-xmr8
Published
2024-01-30T15:56:43.527Z
Modified
2025-11-20T02:03:37.586777Z
Severity
  • 3.3 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
vantage6-UI docker image leaks software version information
Details

vantage6-UI is the User Interface for vantage6. The docker image used to run the UI leaks the nginx version. To mitigate the vulnerability, users can run the UI as an angular application. This vulnerability was patched in 4.2.0.

Database specific
{
    "cwe_ids": [
        "CWE-200"
    ]
}
References

Affected packages

Git / github.com/vantage6/vantage6-ui

Affected ranges

Type
GIT
Repo
https://github.com/vantage6/vantage6-ui
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

version/3.*

version/3.3.6
version/3.3.6-post1
version/3.3.7
version/3.3.7-post1
version/3.3.7-post2
version/3.3.7-post3
version/3.4.0
version/3.5.0
version/3.5.1
version/3.5.2
version/3.5.3
version/3.6.0
version/3.6.1
version/3.7.0
version/3.7.1
version/3.8.0

version/4.*

version/4.0.0
version/4.0.1
version/4.0.2
version/4.0.3
version/4.0.4
version/4.1.0