Lucene search

K
osvGoogleOSV:CVE-2021-38182
HistoryDec 14, 2021 - 4:15 p.m.

CVE-2021-38182

2021-12-1416:15:08
Google
osv.dev
2
kyma
input validation
authenticated users
privilege escalation
cluster compromise

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

38.1%

Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster.

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

38.1%

Related for OSV:CVE-2021-38182