Skip to content
OpenAdvisories

Package · Go

github.com/mittwald/kube-httpcache

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-47xh-qxqv-mgvg

    kube-httpcache is vulnerable to Cross-Site Request Forgery (CSRF)

    ### Impact > A request forgery attack can be performed on Varnish Cache servers that have the HTTP/2 protocol turned on. An attacker may introduce characters through the HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing …

    github.com/mittwald/kube-httpcache Go