Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-36539
9.8
CRITICALCVSS v3
Published
July 24, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
projectcontour/contour
GitHubContour is a Kubernetes ingress controller using Envoy proxy.
GitHubContour is a Kubernetes ingress controller using Envoy proxy.= 1.28.3NVD