Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Weave Component: Weave Gitops Clear all filters
TI-2022-07568 CVE-2022-23509 · GHSA-89qm-wcmw-3mgg

Weave Gitops Run vulnerable to insecure communication

Priority LOW 34

Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise.

CVSS 3.1HIGH 7.4 Adjacent network High privileges User interaction EPSS 0.0025 Published 2023-01-09 Fixed in 0.12.0 CWE-200
TI-2022-07567 CVE-2022-23508 · GHSA-wr3c-g326-486c

GitOps Run allows for Kubernetes workload injection

Priority MEDIUM 40

Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise.

CVSS 3.1HIGH 8.9 Adjacent network No auth User interaction EPSS 0.00333 Published 2023-01-09 Fixed in 0.12.0 CWE-284
TI-2022-13142 CVE-2022-31098 · GHSA-xggc-qprg-x6mw

Weave GitOps leaked cluster credentials into logs on connection errors

Priority MEDIUM 43

Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.01261 Published 2022-06-27 Fixed in 0.8.1-rc.6 CWE-532