CVE-2021-38182

HIGH 8.8CVE-2021-38182 · Published 14/12/2021 · updated 17/06/2026

In short

CVE-2021-38182 is a HIGH (CVSS 8.8) vulnerability affecting kyma (kyma-project).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.8% of all vulnerabilities.
Fix: update to 1.24.7 or later.

Package	Affected versions	Patched versions
kyma kyma-project	`< 1.24.7`	`1.24.7`

Description

Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster.

References

kyma-project/kyma security advisory · Third Party Advisory
wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021 · Not Applicable

More vulnerabilities in kyma

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free