Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Kubernetes ingress-nginx 1.2.0 Clear all filters
TI-2021-07836 CVE-2021-25746 · GHSA-79xv-4hmm-pw72

Ingress-nginx directive injection via annotations

Priority LOW 36

A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use .metadata.annotations in an Ingress object (in the networking.k8s.io or extensions API group) to obtain the…

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.01436 Published 2022-05-06 Fixed in 1.2.0 CWE-20
TI-2021-07835 CVE-2021-25745 · GHSA-pvmg-xgmx-9mxh

Ingress-nginx path can be pointed to service account token file

Priority LOW 38

A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the spec.rules[].http.paths[].path field of an Ingress object (in the networking.k8s.io or extensions API gr…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01182 Published 2022-05-06 Fixed in 1.2.0 CWE-20