CVE-2022-36035

🗓️ 31 Aug 2022 14:55:09Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 55 Views

Flux CLI vulnerability allows arbitrary content deployment to Kubernetes cluster

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2022-36035	31 Aug 202218:36	–	circl
CNNVD	Flux2 路径遍历漏洞	31 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-36035 Flux CLI Workload Injection	31 Aug 202214:55	–	cvelist
EUVD	EUVD-2022-6984	3 Oct 202520:07	–	euvd
Github Security Blog	Flux CLI Workload Injection	1 Sep 202222:15	–	github
NVD	CVE-2022-36035	31 Aug 202215:15	–	nvd
OSV	BIT-FLUX-2022-36035 Flux CLI Workload Injection	2 Dec 202517:36	–	osv
OSV	CVE-2022-36035 Flux CLI Workload Injection	31 Aug 202214:55	–	osv
OSV	GHSA-XWF3-6RGV-939R Flux CLI Workload Injection	1 Sep 202222:15	–	osv
OSV	GO-2022-0960 Flux CLI Workload Injection in github.com/fluxcd/flux2	21 Aug 202416:03	–	osv

NVD

Vulners

Node

fluxcd flux2Range0.21.0–0.32.0

[
  {
    "product": "flux2",
    "vendor": "fluxcd",
    "versions": [
      {
        "status": "affected",
        "version": "< 0.32.0, >= 0.21.0"
      }
    ]
  }
]