fluxcd kayıtları
fluxcd üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-1284 Improper Validation of Specified Quantity in Input1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2022-24817İstismar yok | Improper kubeconfig validation allows arbitrary code executionfluxcd · flux2 · CWE-94 | Kritik9,9 | — | %1,1 | 5 May 2022 |
36İzleyin | CVE-2021-41254İstismar yok | Privilege escalation to cluster admin on multi-tenant environmentsfluxcd · kustomize-controller · CWE-78 | Yüksek8,8 | — | %1,8 | 12 Kas 2021 |
35İzleyin | CVE-2022-24877İstismar yok | Improper path handling in kustomization files allows path traversalfluxcd · flux2 · CWE-22 | Yüksek8,8 | — | %1,2 | 5 May 2022 |
31İzleyin | CVE-2022-36035İstismar yok | Flux CLI Workload Injectionfluxcd · flux2 · CWE-22 | Yüksek7,8 | — | %0,3 | 31 Ağu 2022 |
30İzleyin | CVE-2022-36049İstismar yok | Flux2 Helm Controller denial of servicehelm · helm · CWE-400 | Yüksek7,5 | — | %1,4 | 7 Eyl 2022 |
26İzleyin | CVE-2022-24878İstismar yok | Improper path handling in Kustomization files allows for denial of servicefluxcd · flux2 · CWE-22 | Orta6,5 | — | %1,0 | 5 May 2022 |
17İzleyin | CVE-2022-39272İstismar yok | Flux2 vulnerable to Denial of Service due to Improper use of metav1.Durationfluxcd · flux2 · CWE-1284 | Orta4,3 | — | %0,7 | 21 Eki 2022 |
- CVE-2022-2481739İzleyin
Improper kubeconfig validation allows arbitrary code execution
KritikCVSS 9,9İstismar yokEPSS %1fluxcd · flux25 May 2022
- CVE-2021-4125436İzleyin
Privilege escalation to cluster admin on multi-tenant environments
YüksekCVSS 8,8İstismar yokEPSS %2fluxcd · kustomize-controller12 Kas 2021
- CVE-2022-2487735İzleyin
Improper path handling in kustomization files allows path traversal
YüksekCVSS 8,8İstismar yokEPSS %1fluxcd · flux25 May 2022
- CVE-2022-3603531İzleyin
Flux CLI Workload Injection
YüksekCVSS 7,8İstismar yokEPSS %0fluxcd · flux231 Ağu 2022
- CVE-2022-3604930İzleyin
Flux2 Helm Controller denial of service
YüksekCVSS 7,5İstismar yokEPSS %1helm · helm7 Eyl 2022
- CVE-2022-2487826İzleyin
Improper path handling in Kustomization files allows for denial of service
OrtaCVSS 6,5İstismar yokEPSS %1fluxcd · flux25 May 2022
- CVE-2022-3927217İzleyin
Flux2 vulnerable to Denial of Service due to Improper use of metav1.Duration
OrtaCVSS 4,3İstismar yokEPSS %1fluxcd · flux221 Eki 2022