Lucene search
+L

6 matches found

OSV
OSV
added 2026/01/26 11:26 p.m.3 views

GHSA-MXXC-P822-2HX9 Skipper Ingress Controller Allows Unauthorized Access to Internal Services via ExternalName

Impact When running Skipper as an Ingress controller, users with permissions to create an Ingress and a Service of type ExternalName can create routes that enable them to use Skipper's network access to reach internal services. Patches https://github.com/zalando/skipper/releases/tag/v0.24.0...

8.1CVSS5.9AI score0.00267EPSS
SaveExploits0References6
Rows per page
Query Builder