logging-operator vulnerabilities
2 known vulnerabilities in logging-operator from Kube-logging. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
9.4average CVSS score
Latest first
- 9.9 Critical severity
logging-operator: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior to 6.6.0, the Fluentd configuration renderer FluentRender in pkg/sdk/logging/model/render/fluent.go writes CRD strings such as Flow record_transformer.records va
- 8.8 High severity
logging_operator: Incorrect Default Permissions
Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.