Product · projectcapsule

capsule-proxy

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 4.3

CVE-2023-46254

Service accounts can see namespaces of other tenants in capsule-proxy

capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework. A bug in the RoleBinding reflector used by `capsule-proxy` gives ServiceAccount tenant owners the right to list Namespaces of other tenants backed by the same owner kind and name…

projectcapsule capsule-proxy github.com/projectcapsule/capsule github.com/projectcapsule/capsule-proxy Go

Nov 6, 2023