CVE-2024-40632

Linkerd is an open source, ultralight, security-first service mesh for Kubernetes. In affected versions when the application being run by linkerd is susceptible to SSRF, an attacker could potentially trigger a denial-of-service DoS attack by making requests to localhost:4191/shutdown. Linkerd cou...

CVE-2024-40632: Server-Side Request Forgery (SSRF)

Linkerd is an open source, ultralight, security-first service mesh for Kubernetes. In affected versions when the application being run by linkerd is susceptible to SSRF, an attacker could potentially trigger a denial-of-service DoS attack by making requests to localhost:4191/shutdown. Linkerd cou...

PT-2024-5622

Name of the Vulnerable Software and Affected Versions Linkerd versions prior to edge-24.6.2 Description The issue is related to insufficient server-side request validation in Linkerd, which can be exploited to trigger a denial-of-service DoS attack. An attacker could potentially make requests to...