github.com/projectcapsule/capsule-proxy

2 results · Feed

• Critical 9.8
  CVE-2023-48312

  Authentication bypass using an empty token in capsule-proxy

  capsule-proxy is a reverse proxy for the capsule operator project. Affected versions are subject to a privilege escalation vulnerability which is based on a missing check if the user is authenticated based on the `TokenReview` result. All the clusters running…

  projectcapsule capsule-proxy github.com/clastix/capsule-proxy github.com/projectcapsule/capsule-proxy Go
  Nov 24, 2023
• Medium 4.3
  CVE-2023-46254

  Service accounts can see namespaces of other tenants in capsule-proxy

  capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework. A bug in the RoleBinding reflector used by `capsule-proxy` gives ServiceAccount tenant owners the right to list Namespaces of other tenants backed by the same owner kind and name…

  projectcapsule capsule-proxy github.com/projectcapsule/capsule github.com/projectcapsule/capsule-proxy Go
  Nov 6, 2023