Lucene search

K
osvGoogleOSV:BIT-NGINX-INGRESS-CONTROLLER-2023-5043
HistoryMar 06, 2024 - 10:58 a.m.

BIT-nginx-ingress-controller-2023-5043

2024-03-0610:58:38
Google
osv.dev
6
ingress
nginx
annotation
injection
arbitrary command execution
software

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.002

Percentile

58.8%

Ingress nginx annotation injection causes arbitrary command execution.

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.002

Percentile

58.8%

Related for OSV:BIT-NGINX-INGRESS-CONTROLLER-2023-5043