Fluxcd

Flux2

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 0.31%
  • Veröffentlicht 22.10.2022 00:15:09
  • Zuletzt bearbeitet 21.11.2024 07:17:55

Flux is an open and extensible continuous delivery solution for Kubernetes. Versions prior to 0.35.0 are subject to a Denial of Service. Users that have permissions to change Flux’s objects, either through a Flux source or directly within a cluster, ...

  • EPSS 0.2%
  • Veröffentlicht 07.09.2022 21:15:08
  • Zuletzt bearbeitet 21.11.2024 07:12:16

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Hel...

  • EPSS 0.1%
  • Veröffentlicht 31.08.2022 15:15:08
  • Zuletzt bearbeitet 21.11.2024 07:12:14

Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration (like Git repositories), and automating updates to configuration when there is new code to deploy. Flux CLI allows users to deploy Flux components into a Kubernetes ...

  • EPSS 0.31%
  • Veröffentlicht 06.05.2022 02:15:07
  • Zuletzt bearbeitet 21.11.2024 06:51:18

Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious `kustomization.yaml` allows an attacker to cause a Denial of Service at the controller level. Workarounds include a...

  • EPSS 0.62%
  • Veröffentlicht 06.05.2022 01:15:09
  • Zuletzt bearbeitet 21.11.2024 06:51:18

Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious `kustomization.yaml` allows an attacker to expose sensitive data from the controller’s pod filesystem and possibly ...

  • EPSS 0.38%
  • Veröffentlicht 06.05.2022 00:15:07
  • Zuletzt bearbeitet 21.11.2024 06:51:09

Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.1.0 to v0.23.0 are vulnerable to Code Injection via malicious Kubeconfi...