CVE-2025-14727 — NGINX Ingress Controller vulnerability

CVE-2025-14727

NGINX Ingress Controller vulnerability PUBLISHED

Description (CNA)

A vulnerability exists in NGINX Ingress Controller's nginx.org/rewrite-target annotation validation. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected (CNA)

Vendor / product	Versions
F5 / NGINX Ingress Controller	affected 5.3.0 before 5.3.1; unaffected 5.2.0 before ; unaffected 5.1.0 before ; unaffected 5.0.0 before ; unaffected 4.0.0 before ; unaffected 3.0.0 before *

CWE

CWE-22

References

https://my.f5.com/manage/s/article/K000158176

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.