CVE-2021-25746

概要

参考情報

• kubernetes/ingress-nginx · Issue Tracking
• groups.google.com/g/kubernetes-security-announce/c/hv2-SfdqcfQ · Issue Tracking
• security.netapp.com/advisory/ntap-20220609-0006 · Third Party Advisory

ingress-nginx のその他の脆弱性

• CVE-2026-3288高 8.8A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to in…
• CVE-2023-5044高 8.8Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.
• CVE-2023-5043高 8.8Ingress nginx annotation injection causes arbitrary command execution.
• CVE-2022-4886中 6.5Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.
• CVE-2021-25748中 6.5A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypas…