Skip to content
OpenAdvisories

Package · Go

github.com/ctfer-io/fullchain

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.1

    Fullchain's Invalid NetworkPolicy enables a malicious actor to pivot into another namespace

    Fullchain is an umbrella project for deploying a ready-to-use CTF platform. In versions prior to 0.1.1, due to a mis-written NetworkPolicy, a malicious actor can pivot from a subverted application to any Pod out of the origin namespace. The flawed inter-ns Ne…