Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-25748

A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the `spec.rules[].http.paths[].path` field of an Ingress object (in the `networking.k8s.io` or `extensions` API group) to obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster.

Published

2023-05-24T17:15:09.253

Last Modified

2024-11-21T05:55:20.377

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.6 (HIGH)

Weaknesses

Type: Secondary
CWE-20
Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	kubernetes	ingress-nginx	< 1.2.1	Yes

References

https://github.com/kubernetes/ingress-nginx/issues/8686 Issue Tracking, Mitigation, Vendor Advisory ([email protected])
https://groups.google.com/g/kubernetes-security-announce/c/avaRYa9c7I8 Mailing List, Mitigation, Vendor Advisory ([email protected])
https://github.com/kubernetes/ingress-nginx/issues/8686 Issue Tracking, Mitigation, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://groups.google.com/g/kubernetes-security-announce/c/avaRYa9c7I8 Mailing List, Mitigation, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)