Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Kyma-project Component: Kyma Clear all filters
TI-2021-15860 CVE-2021-38182

Improper output encoding in SAP Kyma

Priority MEDIUM 40

Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01101 Published 2021-12-14 Fixed in 1.24.7 CWE-116
TI-2021-13082 CVE-2021-33708

Improper input validation in SAP Kyma

Priority MEDIUM 40

Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00853 Published 2021-08-10 Fixed in 1.24 CWE-20