Lucene search
CVE-2023-27484
crossplane-runtime in affected versions allows highly privileged users to specify an arbitrary high index in a patch's `ToFieldPath`, leading to excessive memory usage & potential OOM-Kill. Upgrade to versions 1.11.2, 1.10.3, or 1.9.2 advised
Show more
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | Crossplane-runtime contains Improper Input Validation via Compositions | 10 Mar 202323:47 | – | github |
 | Denial Of Service (DoS) | 12 Mar 202312:00 | – | veracode |
 | CVE-2023-27484 | 9 Mar 202321:15 | – | nvd |
 | CGA-pgw2-jmgx-j6r6 | 6 Jun 202412:28 | – | osv |
| Crossplane-runtime contains Improper Input Validation via Compositions | 10 Mar 202323:47 | – | osv |
| CVE-2023-27484 | 9 Mar 202321:15 | – | osv |
 | CVE-2023-27484 Unchecked fieldpath index in Composition's patches can lead to arbitrary memory allocation in crossplane | 9 Mar 202320:22 | – | cvelist |
 | Code injection | 9 Mar 202321:15 | – | prion |
Node
OROR
[
{
"vendor": "crossplane",
"product": "crossplane",
"versions": [
{
"version": "< 1.9.2",
"status": "affected"
},
{
"version": ">= 1.10.0, < 1.10.3",
"status": "affected"
},
{
"version": ">= 1.11.0, < 1.11.2",
"status": "affected"
}
]
}
]Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo09 Mar 2023 21:15Current
5.7Medium risk
Vulners AI Score5.7
CVSS34.9
EPSS0.001