Remote Code Execution (RCE)

2022-05-0908:00:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

38.9%

JSON

github.com/fluxcd is vulnerable to remote code execution. The vulnerability exists due to a lack of validation of access and sanitization of flagging inputs which allows a malicious user to inject and execute arbitrary javascript code.

CPENameOperatorVersion
github.com/fluxcd/helm-controllerleapi/v0.18.2
github.com/fluxcd/kustomize-controllerlev0.22.3
github.com/fluxcd/flux2lev0.28.5
github.com/fluxcd/helm-controllerleapi/v0.18.2
github.com/fluxcd/kustomize-controllerlev0.22.3
github.com/fluxcd/flux2lev0.28.5

Name	Operator	Version
github.com/fluxcd/helm-controller	le	api/v0.18.2
github.com/fluxcd/kustomize-controller	le	v0.22.3
github.com/fluxcd/flux2	le	v0.28.5
github.com/fluxcd/helm-controller	le	api/v0.18.2
github.com/fluxcd/kustomize-controller	le	v0.22.3
github.com/fluxcd/flux2	le	v0.28.5