Cncf

Crossplane

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-38495

Exploit
  • EPSS 0.24%
  • Published 27.07.2023 19:15:10
  • Last modified 21.11.2024 08:13:41

Crossplane is a framework for building cloud native control planes without needing to write code. In versions prior to 1.11.5, 1.12.3, and 1.13.0, Crossplane's image backend does not validate the byte contents of Crossplane packages. As such, Crosspl...

2.7

CVE-2023-37900

Exploit
  • EPSS 0.06%
  • Published 27.07.2023 16:15:10
  • Last modified 21.11.2024 08:12:25

Crossplane is a framework for building cloud native control planes without needing to write code. In versions prior to 1.11.5, 1.12.3, and 1.13.0, a high-privileged user could create a Package referencing an arbitrarily large image containing that Cr...