Lucene search
Veracode Vulnerability DatabaseVERACODE:35454HistoryMay 09, 2022 - 8:33 a.m.
Directive Injection
2022-05-0908:33:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.002 Low
EPSS
Percentile
58.4%
github.com/kubernetes/ingress-nginx is vulnerable to directive injection. a malicious user who has the privileges to create or update ingress objects is able to use .metadata.annotations in an Ingress object to obtain the credentials of the ingress-nginx controller.
Related
osv
osv
BIT-nginx-ingress-controller-2021-25746
2024-03-06 10:59:11
CVE-2021-25746
2022-05-06 01:15:09
cvelist
cvelist
CVE-2021-25746 Ingress-nginx directive injection via annotations
2022-04-22 00:00:00
prion
prion
Default configuration
2022-05-06 01:15:00
redhatcve
redhatcve
CVE-2021-25746
2022-04-25 08:31:03
cve
cve
CVE-2021-25746
2022-05-06 01:15:09
nvd
nvd
CVE-2021-25746
2022-05-06 01:15:09
hackerone
hackerone
wallarmlab
wallarmlab
Two critical security flaws found in Nginx-Ingress controller
2022-05-12 21:52:03
ibm
ibm