CVE-2021-25742

概要

参考情報

• kubernetes/ingress-nginx · Exploit
• groups.google.com/g/kubernetes-security-announce/c/mT4JJxi9tQY · Mailing List
• security.netapp.com/advisory/ntap-20211203-0001 · Third Party Advisory

ingress-nginx のその他の脆弱性

• CVE-2026-3288高 8.8A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to in…
• CVE-2023-5044高 8.8Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.
• CVE-2023-5043高 8.8Ingress nginx annotation injection causes arbitrary command execution.
• CVE-2022-4886中 6.5Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.
• CVE-2021-25748中 6.5A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypas…