Vulnerabilities

TI-2023-26175 CVE-2023-48312 · GHSA-fpvw-6m5v-hqfp

Authentication bypass using an empty token in capsule-proxy

MEDIUM 43

capsule-proxy is a reverse proxy for the capsule operator project.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00574 Published 2023-11-24 Fixed in 0.4.6 CWE-287

TI-2023-24881 CVE-2023-46254 · GHSA-6758-979h-249x

LOW 21

capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.005 Published 2023-11-06 Fixed in 0.4.5 CWE-200

TI-2022-07704 CVE-2022-23652 · GHSA-9cwv-cppx-mqjm

HIGH 73

capsule-proxy is a reverse proxy for Capsule Operator which provides multi-tenancy in Kubernetes.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01397 Published 2022-02-22 Fixed in 0.2.1 CWE-287