4.8
Moyenne
CVE-2025-24513 A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided…
Description
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided data are included in a filename by the ingress-nginx Admission Controller feature, resulting in directory traversal within the container. This could result in denial of service, or when combined with other vulnerabilities, limited disclosure of Secret objects from the cluster.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ingress-nginx | 1.12.0 | Pas de correctif indiqué |
| ingress-nginx 1.11 | premières → 1.11.4 | Pas de correctif indiqué |
Autres CVE de ingress-nginx
Les 18 CVE de ingress-nginx →
CVE-2026-116472
ingress-nginx mirror-target self-DOS
2.7
Faible
CVE-2026-4342
A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject…
8.8
Élevée
CVE-2026-3288
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress…
8.8
Élevée
CVE-2025-15566
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers`…
8.8
Élevée