Crossplane-runtime allows high-privileged users to create or update Compositions with a high index in `ToFieldPath`, leading to excessive memory usage
Reporter | Title | Published | Views | Family All 10 |
---|---|---|---|---|
![]() | Denial Of Service (DoS) | 12 Mar 202312:00 | – | veracode |
![]() | CVE-2023-27484 Unchecked fieldpath index in Composition's patches can lead to arbitrary memory allocation in crossplane | 9 Mar 202320:22 | – | vulnrichment |
![]() | Crossplane-runtime contains Improper Input Validation via Compositions | 10 Mar 202323:47 | – | github |
![]() | CGA-PGW2-JMGX-J6R6 | 6 Jun 202412:28 | – | osv |
![]() | GHSA-V829-X6HH-CQFQ Crossplane-runtime contains Improper Input Validation via Compositions | 10 Mar 202323:47 | – | osv |
![]() | CVE-2023-27484 | 9 Mar 202321:15 | – | osv |
![]() | CVE-2023-27484 Unchecked fieldpath index in Composition's patches can lead to arbitrary memory allocation in crossplane | 9 Mar 202320:22 | – | cvelist |
![]() | CVE-2023-27484 | 23 May 202502:25 | – | redhatcve |
![]() | Code injection | 9 Mar 202321:15 | – | prion |
![]() | CVE-2023-27484 | 9 Mar 202321:15 | – | cve |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo