CVE-2021-25742

Mô tả

Tham khảo

• kubernetes/ingress-nginx · Exploit
• groups.google.com/g/kubernetes-security-announce/c/mT4JJxi9tQY · Mailing List
• security.netapp.com/advisory/ntap-20211203-0001 · Third Party Advisory

Lỗ hổng khác của ingress-nginx

• CVE-2026-3288CAO 8.8A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to in…
• CVE-2023-5044CAO 8.8Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.
• CVE-2023-5043CAO 8.8Ingress nginx annotation injection causes arbitrary command execution.
• CVE-2022-4886TRUNG BÌNH 6.5Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.
• CVE-2021-25748TRUNG BÌNH 6.5A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypas…