Lucene search
+L

2 matches found

OSV
OSV
•added 2026/05/08 5:24 p.m.•12 views

GHSA-FQ7H-9X26-6J22 ExternalSecrets vulnerable to privilege escalation with secret overwriting

ExternalSecrets allows users to craft Service Account tokens for misconfigured Service Accounts in namespaces the users have access to. Impact A user who only has permission to create ExternalSecret resources can cause the operator to create a Secret that Kubernetes will automatically populate wi...

4.9CVSS5.8AI score0.00257EPSS
SaveExploits0References5
Rows per page
Query Builder