CVE-2022-2835

2023-03-0300:00:00

CWE-923

redhat

www.cve.org

coredns

internal calls

rerouting

AI Score

4.8

Confidence

High

EPSS

Percentile

9.0%

JSON

A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that were accessed by the FQDN in a format of <service>.<namespace>.svc.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "coreDNS",
    "versions": [
      {
        "version": "unknown",
        "status": "affected"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=2118542