CVE-2021-27099

SPIRE vulnerability CVE-2021-27099 affects earlier SPIRE releases (before 0.11.3 and 0.12.1) where the aws_iid Node Attestor’s agent ID templating path could be improperly normalized. If an attacker controls an EC2 tag value and templating is configured with this tag as the last path element, it ...