Lucene search
K

6 matches found

OSV
OSV
added 2026/05/21 3:34 p.m.3 views

GHSA-Q8CH-JX67-Q52X Apache Camel K: Kubernetes namespace authorized users can create a Build resource

Externally Controlled Reference to a Resource in Another Sphere, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel K. Authorized users in a Kubernetes namespace can create a Build resource, controlling the Pod generation in a namespace of their choice, including the...

8.1CVSS5.8AI score0.00325EPSS
Exploits0References10
Snyk
Snyk
added 2026/05/21 1:56 p.m.10 views

Externally Controlled Reference to a Resource in Another Sphere

Overview Affected versions of this package are vulnerable to Externally Controlled Reference to a Resource in Another Sphere via the Build resource creation. An attacker can gain unauthorized control over pod generation in arbitrary Kubernetes namespaces, including the operator namespace, by...

8.6CVSS5.9AI score0.00325EPSS
Exploits0References2
CVE
CVE
added 2026/05/21 11:43 a.m.22 views

CVE-2026-45760

Apache Camel K (CVE-2026-45760) contains a cross-namespace build execution vulnerability: authorized users in a Kubernetes namespace can create a Build resource that controls Pod generation in a target namespace, including the operator namespace, via externally controlled resource references and ...

8.1CVSS5.8AI score0.00325EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/21 11:43 a.m.43 views

CVE-2026-45760 Apache Camel K: Camel K Cross-Namespace Build Deputy Attack

Externally Controlled Reference to a Resource in Another Sphere, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel K. Authorized users in a Kubernetes namespace can create a Build resource, controlling the Pod generation in a namespace of their choice, including the...

0.00325EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/21 11:43 a.m.8 views

CVE-2026-45760 Apache Camel K: Camel K Cross-Namespace Build Deputy Attack

Externally Controlled Reference to a Resource in Another Sphere, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel K. Authorized users in a Kubernetes namespace can create a Build resource, controlling the Pod generation in a namespace of their choice, including the...

5.8AI score0.00325EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/21 11:43 a.m.5 views

CVE-2026-45760

Externally Controlled Reference to a Resource in Another Sphere, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel K. Authorized users in a Kubernetes namespace can create a Build resource, controlling the Pod generation in a namespace of their choice, including the...

5.8AI score0.00325EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder