584 matches found
GHSA-5WJ4-WFFQ-3378 Ingress nginx annotation injection causes arbitrary command execution
Issue Details A security issue was identified in ingress-nginx where the nginx.ingress.kubernetes.io/configuration-snippet annotation on an Ingress object in the networking.k8s.io or extensions API group can be used to inject arbitrary commands, and obtain the credentials of the ingress-nginx...
Ingress nginx annotation injection causes arbitrary command execution
Issue Details A security issue was identified in ingress-nginx where the nginx.ingress.kubernetes.io/configuration-snippet annotation on an Ingress object in the networking.k8s.io or extensions API group can be used to inject arbitrary commands, and obtain the credentials of the ingress-nginx...
Ingress-nginx path sanitization can be bypassed
Ingress-nginx path sanitization can be bypassed with logformat directive...
GHSA-GVRM-W2F9-F77Q Ingress-nginx path sanitization can be bypassed
Ingress-nginx path sanitization can be bypassed with logformat directive...
CVE-2023-5043 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
CVE-2023-5044 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
CVE-2023-5044 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
CVE-2023-5043 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
CVE-2023-5043
Ingress nginx annotation injection causes arbitrary command execution...
CVE-2022-4886
Ingress-nginx path sanitization can be bypassed with logformat directive...
Code injection
Ingress-nginx path sanitization can be bypassed with logformat directive...
Design/Logic Flaw
Ingress nginx annotation injection causes arbitrary command execution...
CVE-2023-5043 Ingress nginx annotation injection causes arbitrary command execution
Ingress nginx annotation injection causes arbitrary command execution...
CVE-2023-5043
Ingress nginx annotation injection causes arbitrary command execution...
CVE-2023-5043
CVE-2023-5043 affects Kubernetes ingress-nginx where the nginx.ingress.kubernetes.io/configuration-snippet annotation injection allows a remote authenticated attacker to execute arbitrary commands on the system due to improper input validation. IBM’s bulletin associates this CVE with IBM Cloud Ku...
CVE-2022-4886
Ingress-nginx path sanitization can be bypassed with logformat directive...
CVE-2022-4886 Ingress-nginx `path` sanitization can be bypassed with `log_format` directive
Ingress-nginx path sanitization can be bypassed with logformat directive...
CVE-2022-4886 Ingress-nginx `path` sanitization can be bypassed with `log_format` directive
Ingress-nginx path sanitization can be bypassed with logformat directive...
CVE-2022-4886
CVE-2022-4886 is an Ingress-Nginx vulnerability where path sanitization can be bypassed via the log_format directive. IBM and OSV entries describe an impact: a remote authenticated attacker could obtain credentials information from Kubernetes Ingress Controller (ALB) deployments affected by this ...