CVE-2021-25742

Published
View on NVD ↗
CVSS v3
7.6
HIGH
CVSS v2
5.5
MEDIUM
Affected
1
PROJECT

Description

A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster.

Ingress NGINX Controller for Kubernetes
GitHubGitHub
19.5K