Exploit for Improper Input Validation in Kubernetes Ingress-Nginx

🗓️ 17 Jan 2024 14:32:54Reported by 4ARMEDType

Exploit for Code Injection in Kubernetes Ingress Nginx. Automates CVE-2023-5044 exploit for flexible remote code execution. Requires a vulnerable Ingress Nginx.

Reporter	Title	Published	Views	Family All 38
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by Kubernetes Ingress Controller security vulnerabilities (CVE-2023-5043, CVE-2023-5044, CVE-2022-4886)	10 Nov 202309:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Kubernetes ingress-nginx	19 Mar 202423:36	–	ibm
BDU FSTEC	The vulnerability of the nginx.ingress.kubernetes.io/permanent-redirect controller in the Kubernetes ingress-nginx cluster allows a attacker to execute arbitrary commands.	2 Nov 202300:00	–	bdu_fstec
Chainguard	CVE-2023-5044 vulnerabilities	25 Oct 202320:15	–	cgr
Circl	CVE-2023-5044	26 Oct 202300:39	–	circl
CNNVD	Ingress NGINX Controller Code Injection Vulnerability	25 Oct 202300:00	–	cnnvd
CVE	CVE-2023-5044	25 Oct 202319:19	–	cve
Cvelist	CVE-2023-5044 Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation	25 Oct 202319:19	–	cvelist
GithubExploit	Exploit for Improper Input Validation in Kubernetes Ingress-Nginx	29 Mar 202418:53	–	githubexploit
EUVD	EUVD-2023-2727	3 Oct 202520:07	–	euvd