Lucene search

K
osvGoogleOSV:GO-2023-1377
HistoryAug 20, 2024 - 8:25 p.m.

GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

2024-08-2020:25:58
Google
osv.dev
3
gitops
kubernetes
injection
weave gitops

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

7

Confidence

Low

GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

7

Confidence

Low

Related for OSV:GO-2023-1377