Lucene search

Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-5EFFC804C3FC3D7DEDD64EF00D8C3F18

HistoryJun 05, 2020 - 12:00 a.m.

Server-Side Request Forgery (SSRF)

2020-06-0500:00:00

https://gitlab.com/gitlab-org/security-products/gemnasium-db

gitlab.com

0.001 Low

EPSS

Percentile

41.5%

JSON

The Kubernetes kube-controller-manager is vulnerable to a Server Side Request Forgery (SSRF) that allows certain authorized users to leak up to bytes of arbitrary information from unprotected endpoints within the master’s host network (such as link-local or loopback services).

CPENameOperatorVersion
go/k8s.io/kubernetes/pkg/apis/apps/validationlt1.15.11
go/k8s.io/kubernetes/pkg/apis/apps/validationge1.16.0
go/k8s.io/kubernetes/pkg/apis/apps/validationlt1.16.9
go/k8s.io/kubernetes/pkg/apis/apps/validationge1.17.0
go/k8s.io/kubernetes/pkg/apis/apps/validationlt1.17.5
go/k8s.io/kubernetes/pkg/apis/apps/validationge1.18.0
go/k8s.io/kubernetes/pkg/apis/apps/validationlt1.18.1

Name	Operator	Version
go/k8s.io/kubernetes/pkg/apis/apps/validation	lt	1.15.11
go/k8s.io/kubernetes/pkg/apis/apps/validation	ge	1.16.0
go/k8s.io/kubernetes/pkg/apis/apps/validation	lt	1.16.9
go/k8s.io/kubernetes/pkg/apis/apps/validation	ge	1.17.0
go/k8s.io/kubernetes/pkg/apis/apps/validation	lt	1.17.5
go/k8s.io/kubernetes/pkg/apis/apps/validation	ge	1.18.0
go/k8s.io/kubernetes/pkg/apis/apps/validation	lt	1.18.1