Archive
23 July 2021
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
High 8.5
Authorization bypass in Contour
Contour is a Kubernetes ingress controller using Envoy proxy. In Contour before version 1.17.1 a specially crafted ExternalName type Service may be used to access Envoy's admin interface, which Contour normally prevents from access outside the Envoy container…
-
High 8.1
Command Injection
All versions of package gitlogplus are vulnerable to Command Injection via the main functionality, as options attributes are appended to the command to be executed without sanitization.