25 matches found
Spinnaker: Improper yaml processing on kustomize bake operations
Impact Kustomize bake operations allow unsafe tag processing. This can lead to RCE type exploits on the rosco pods when doing kustomize bakes. This ONLY is possible when using Kustomize. The simple solution is to block kustomize operations and instead use another provider. Workarounds Disable...
7.5CVSS5.9AI score0.01057EPSS
SaveExploits0References13Affected Software1
20