TI-2025-29813 CVE-2025-47283 · GHSA-3hw7-qj9h-r835
Bypassing project secret validation can lead to privilege escalation
Priority MEDIUM 44
Gardener implements the automated management and operation of Kubernetes clusters as a service.
gardener
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
gardener records in CISA KEVNo gardener vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Gardener · all components
TI-2025-29814 CVE-2025-47284 · GHSA-9x73-87fh-54w9
Gardener vulnerable to metadata injection for a project secret that can lead to privilege escalation
Priority MEDIUM 43
Gardener implements the automated management and operation of Kubernetes clusters as a service.
TI-2019-09329 CVE-2019-12494 · GHSA-9j69-f6q8-h6wm
In Gardener before 0.20.0, incorrect access control in seed clusters allows information…
Priority MEDIUM 41
In Gardener before 0.20.0, incorrect access control in seed clusters allows information disclosure by sending HTTP GET requests from one's own shoot clusters to foreign shoot clusters.
TI-2018-01854 CVE-2018-2475 · GHSA-g482-4r7c-68g6
Following the Gardener architecture, the Kubernetes apiserver of a Gardener managed shoot…
Priority MEDIUM 40
Following the Gardener architecture, the Kubernetes apiserver of a Gardener managed shoot cluster resides in the corresponding seed cluster.