GHSA-47XH-QXQV-MGVG kube-httpcache is vulnerable to Cross-Site Request Forgery (CSRF)

Impact A request forgery attack can be performed on Varnish Cache servers that have the HTTP/2 protocol turned on. An attacker may introduce characters through the HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1...

kube-httpcache is vulnerable to Cross-Site Request Forgery (CSRF)

Impact A request forgery attack can be performed on Varnish Cache servers that have the HTTP/2 protocol turned on. An attacker may introduce characters through the HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1...