PT-2023-12942

CVE-2022-2837

·

Publicado

2023-03-03

·

Atualizado

2025-03-07

Descrição por

CVSS 3.1
6.1
Média
MétricasAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions coreDNS (affected versions not specified)
Description A flaw was found in coreDNS, allowing a malicious user to redirect traffic intended for external top-level domains (TLD) to a pod they control by creating projects and namespaces that match the TLD.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
GHSA-H828-V5PV-33QX
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾