TI-2022-08687 CVE-2022-24877 · GHSA-j77r-2fxf-5jrw
Improper path handling in kustomization files allows path traversal
Priority MEDIUM 45
Flux is an open and extensible continuous delivery solution for Kubernetes.
fluxcd
Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
fluxcd records in CISA KEVNo fluxcd vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Kustomize-controller · all components
TI-2022-08630 CVE-2022-24817 · GHSA-vvmq-fwmg-2gjc
Improper kubeconfig validation allows arbitrary code execution
Priority MEDIUM 45
Flux2 is an open and extensible continuous delivery solution for Kubernetes.
TI-2021-18089 CVE-2021-41254 · GHSA-35rf-v2jv-gfg7
Privilege escalation to cluster admin on multi-tenant environments
Priority MEDIUM 42
kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes manifests and assembled with Kustomize.
TI-2022-08688 CVE-2022-24878 · GHSA-7pwf-jg34-hxwp
Improper path handling in Kustomization files allows for denial of service
Priority LOW 36
Flux is an open and extensible continuous delivery solution for Kubernetes.
TI-2022-18648 CVE-2022-39272 · GHSA-f4p5-x4vc-mh4v
Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration
Priority LOW 24
Flux is an open and extensible continuous delivery solution for Kubernetes.