49 matches found
CVE-2025-47282
Gardener External DNS Management is an environment to manage external DNS entries for a kubernetes cluster. A security vulnerability was discovered in Gardener's External DNS Management prior to version 0.23.6 that could allow a user with administrative privileges for a Gardener project or a user...
Privilege Escalation
github.com/gardener/external-dns-management is vulnerable to a privilege escalation. The vulnerability is due to insufficient isolation and access control between shoot clusters and the seed cluster in the external-dns-management component, which allows an attacker with admin access to a shoot...
GHSA-XWGG-M7FX-83WX Gardener External DNS Management allows malicious google credential in DNS secret to lead to privilege escalation
A security vulnerability was discovered in Gardener that could allow a user with administrative privileges for a Gardener project or a user with administrative privileges for a shoot cluster, including administrative privileges for a single namespace of the shoot cluster, to obtain control over t...
CVE-2025-47282
Gardener External DNS Management is an environment to manage external DNS entries for a kubernetes cluster. A security vulnerability was discovered in Gardener's External DNS Management prior to version 0.23.6 that could allow a user with administrative privileges for a Gardener project or a user...
CVE-2025-47282 Malicious google credential in DNS secret can lead to privilege escalation
Gardener External DNS Management is an environment to manage external DNS entries for a kubernetes cluster. A security vulnerability was discovered in Gardener's External DNS Management prior to version 0.23.6 that could allow a user with administrative privileges for a Gardener project or a user...
CVE-2025-47282 Malicious google credential in DNS secret can lead to privilege escalation
Gardener External DNS Management is an environment to manage external DNS entries for a kubernetes cluster. A security vulnerability was discovered in Gardener's External DNS Management prior to version 0.23.6 that could allow a user with administrative privileges for a Gardener project or a user...
CVE-2025-47282
CVE-2025-47282 affects Gardener External DNS Management (< 0.23.6) and, when enabled, the shoot-dns-service extension (= 0.23.6; for the extension, upgrade the shoot-dns-service extension beyond v1.60.0. If exploitation details are provided in the connected documents they are not included here...
PT-2025-22064 · Unknown · Gardener External Dns Management +1
Name of the Vulnerable Software and Affected Versions: Gardener External DNS Management versions prior to 0.23.6 gardener/gardener-extension-shoot-dns-service extension versions = v1.60.0 Description: A security issue was discovered in Gardener's External DNS Management that could allow a user wi...
External DNS Management 输入验证错误漏洞
External DNS Management is a Gardener open source environment for managing external DNS entries for kubernetes clusters. An input validation error vulnerability exists in External DNS Management versions prior to 0.23.6, which stems from malicious Google credentials in DNS and could lead to...
SUSE-SU-2025:0992-1 Security update for docker
This update for docker fixes the following issues: Update to Docker 27.5.1-ce bsc1237335: - CVE-2024-29018: External DNS requests from 'internal' networks could lead to data exfiltration bsc1234089...
CVE-2025-30204 vulnerabilities
Vulnerabilities for packages: fulcio, sftpgo-plugin-kms, rancher, k3s, crossplane-provider-family-azure, dgraph, docker, kubescape, terraform-provider-azapi, pulumi, mc, policy-controller, actions-runner-controller, wal-g, argocd-image-updater, sops, tempo, terraform, step-kms-plugin, vexctl,...
GHSA-MH63-6H87-95CP vulnerabilities
Vulnerabilities for packages: fulcio, sftpgo-plugin-kms, rancher, k3s, crossplane-provider-family-azure, dgraph, docker, kubescape, terraform-provider-azapi, pulumi, mc, policy-controller, actions-runner-controller, wal-g, argocd-image-updater, sops, tempo, terraform, step-kms-plugin, vexctl,...
openSUSE Security Advisory (SUSE-SU-2025:0776-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-V6V8-XJ6M-XWQH vulnerabilities
Vulnerabilities for packages: actions-runner-controller, opentelemetry-collector-contrib, zot, neuvector-sigstore-interface, vexctl, rabbitmq-messaging-topology-operator, fulcio-fips, pulumi-kubernetes-operator, crossplane-provider-azure-authorization, snyk-cli, terraform-provider-azurerm,...
CVE-2024-6104 vulnerabilities
Vulnerabilities for packages: actions-runner-controller, opentelemetry-collector-contrib, zot, neuvector-sigstore-interface, vexctl, rabbitmq-messaging-topology-operator, fulcio-fips, pulumi-kubernetes-operator, crossplane-provider-azure-authorization, snyk-cli, terraform-provider-azurerm,...
GHSA-2HMF-46V7-V6FX vulnerabilities
Vulnerabilities for packages: melange, guac, zot, dagger, external-dns-fips, external-dns...
CVE-2023-49559 vulnerabilities
Vulnerabilities for packages: melange, guac, zot, dagger, external-dns-fips, external-dns...
GHSA-M5VV-6R4H-3VJ9 vulnerabilities
Vulnerabilities for packages: step-fips, opentelemetry-collector-contrib, zot, harbor-registry, thanos-fips, fulcio-fips, prometheus-operator, flux-image-reflector-controller, flux-source-controller, argo-cd-fips, argo-cd, cortex-fips, hugo, harbor-registry-fips, falcoctl-fips,...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: sqlpad, fulcio, buildkitd, terragrunt, trivy, flux-image-reflector-controller, rekor, argo-workflows, flux, chezmoi, goreleaser, tkn, nuclei, harbor-registry, cortex, hugo-extended, argo-events, falcoctl, kubescape, step-ca, external-dns, pulumi, tekton-chains,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: prometheus-adapter-fips, cadvisor, actions-runner-controller, dynamic-localpv-provisioner, zot, vexctl, pgpool2exporter-fips, capslock, prometheus-operator, terraform-docs, dagger, flux-source-controller, prometheus-statsd-exporter-fips, metrics-server,...