GO-2023-2340

vendorUSosv

Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno

view advisory published 2024-08-21Licence: per source

Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-47630UShigh7.1OT elevated—
Kyverno is a policy engine designed for Kubernetes. An issue was found in Kyverno that allowed an attacker to control the digest of images used by Kyverno users. The issue would re…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan