CVE-2023-5043 Ingress nginx annotation injection causes arbitrary command execution

🗓️ 25 Oct 2023 19:18:57Reported by kubernetesType

Ingress nginx annotation injection causes arbitrary command executio

Reporter	Title	Published	Views	Family All 23
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by Kubernetes Ingress Controller security vulnerabilities (CVE-2023-5043, CVE-2023-5044, CVE-2022-4886)	10 Nov 202309:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Kubernetes ingress-nginx	19 Mar 202423:36	–	ibm
BDU FSTEC	The vulnerability of the nginx.ingress.kubernetes.io/configuration-snippet component in the Kubernetes ingress-nginx cluster allows a attacker to execute arbitrary code or escalate their privileges.	26 Oct 202300:00	–	bdu_fstec
Chainguard	CVE-2023-5043 vulnerabilities	25 Oct 202320:15	–	cgr
Circl	CVE-2023-5043	30 Oct 202308:13	–	circl
CNNVD	Ingress NGINX Controller Injection Vulnerability	25 Oct 202300:00	–	cnnvd
CVE	CVE-2023-5043	25 Oct 202319:18	–	cve
EUVD	EUVD-2023-2661	3 Oct 202520:07	–	euvd
Github Security Blog	Ingress nginx annotation injection causes arbitrary command execution	25 Oct 202321:30	–	github
NVD	CVE-2023-5043	25 Oct 202320:15	–	nvd

[
  {
    "vendor": "Kubernetes",
    "product": "ingress-nginx",
    "repo": "https://github.com/kubernetes/ingress-nginx",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.9.0",
        "versionType": "semver"
      },
      {
        "status": "unknown",
        "version": "1.9.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2023/10/25/4
groups	www.groups.google.com/g/kubernetes-security-announce/c/pVsXsOpxYZo
security	www.security.netapp.com/advisory/ntap-20240307-0012/
github	www.github.com/kubernetes/ingress-nginx/issues/10571

07 Mar 2024 17:06Current

9.2High risk

Vulners AI Score9.2

CVSS 3.17.6

EPSS0.04102

CWE-20