Endpoint & EndpointSlice permissions allow cross-Namespace forwarding

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack. This issue has been rated Low severity CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N, and assigned CVE-2021-25740. Am I...