ingress-nginx vulnerabilities
10 known vulnerabilities in ingress-nginx from Kubernetes. 10 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
A security issue was discovered in ingress-nginx where a combination of Ingress annotations…
A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets acce
- 8.8 High severity
A security issue was discovered in ingress-nginx where the…
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller,
- 8.8 High severity
A security issue was discovered in ingress-nginx where the…
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx con
- 8.8 High severity
A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress…
A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress field can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets
- 8.8 High severity
A security issue was discovered in ingress-nginx where the…
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, an
- 8.8 High severity
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx…
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx c
- 9.8 Critical severity
ingress-nginx: Improper Isolation or Compartmentalization
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets
- 8.8 High severity
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx…
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in
- 8.8 High severity
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx…
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingres
- 8.8 High severity
A security issue was discovered in ingress-nginx where an actor with permission to create…
A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass annotation validation to inject arbitrary commands and obtain the credentials of the ing