GHSA-5WJ4-WFFQ-3378 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GHSA-5WJ4-WFFQ-3378 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

Ingress nginx annotation injection causes arbitrary command execution

Issue Details A security issue was identified in ingress-nginx where the nginx.ingress.kubernetes.io/configuration-snippet annotation on an Ingress object in the networking.k8s.io or extensions API group can be used to inject arbitrary commands, and obtain the credentials of the ingress-nginx...

Ingress-nginx code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation

A security issue was identified in ingress-nginx where the nginx.ingress.kubernetes.io/permanent-redirect annotation on an Ingress object in the networking.k8s.io or extensions API group can be used to inject arbitrary commands, and obtain the credentials of the ingress-nginx controller. In the...

GHSA-FP9F-44C2-CW27 Ingress-nginx code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation

A security issue was identified in ingress-nginx where the nginx.ingress.kubernetes.io/permanent-redirect annotation on an Ingress object in the networking.k8s.io or extensions API group can be used to inject arbitrary commands, and obtain the credentials of the ingress-nginx controller. In the...

GHSA-FP9F-44C2-CW27 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GHSA-5WJ4-WFFQ-3378 Ingress nginx annotation injection causes arbitrary command execution

Issue Details A security issue was identified in ingress-nginx where the nginx.ingress.kubernetes.io/configuration-snippet annotation on an Ingress object in the networking.k8s.io or extensions API group can be used to inject arbitrary commands, and obtain the credentials of the ingress-nginx...

Ingress-nginx path sanitization can be bypassed

Ingress-nginx path sanitization can be bypassed with logformat directive...

GHSA-GVRM-W2F9-F77Q Ingress-nginx path sanitization can be bypassed

Ingress-nginx path sanitization can be bypassed with logformat directive...

CVE-2023-5043

Ingress nginx annotation injection causes arbitrary command execution...

CVE-2023-5043 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

CVE-2023-5044

Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation...

CVE-2023-5043 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

CVE-2023-5044 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

CVE-2023-5044 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

CVE-2022-4886

Ingress-nginx path sanitization can be bypassed with logformat directive...

Code injection

Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation...

Code injection

Ingress-nginx path sanitization can be bypassed with logformat directive...

Design/Logic Flaw

Ingress nginx annotation injection causes arbitrary command execution...

CVE-2023-5044

CVE-2023-5044 : Code injection via the nginx.ingress.kubernetes.io/permanent-redirect annotation in Kubernetes ingress-nginx. The root cause is improper input validation of the permanent-redirect annotation, enabling an attacker to inject executable content. Public material confirms a PoC/exploit...