Lucene search
+L

42 matches found

OSV
OSV
added 2026/07/17 9:46 p.m.8 views

GHSA-5587-2X54-JJ6H Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication

Description The routesrv component exposes the full cluster route topology Ingress/RouteGroup configurations, backend URLs, filter chains, OAuth/OIDC callback paths and cache-cluster topology Redis/Valkey shard addresses over plain HTTP with zero authentication. Any pod in the Kubernetes cluster...

5.7CVSS5.4AI score
SaveExploits0References3
Rows per page
Query Builder