CVE-2021-33708

2021-08-1020:15:08

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.4%

JSON

Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges.

CPENameOperatorVersion
kymaeq0.90.0
kymaeq1.24.0-rc1
kymaeq0.4.0-rc2
kymaeq0.5.0
kymaeq0.4.0
kymaeqlatest
kymaeq0.4.0-rc1
kymaeq1.24.0-rc2
kymaeq0.4-rc

Name	Operator	Version
kyma	eq	0.90.0
kyma	eq	1.24.0-rc1
kyma	eq	0.4.0-rc2
kyma	eq	0.5.0
kyma	eq	0.4.0
kyma	eq	latest
kyma	eq	0.4.0-rc1
kyma	eq	1.24.0-rc2
kyma	eq	0.4-rc

References

github.com/kyma-project/kyma/security/advisories/GHSA-f2jp-5gj4-q9c9