Go/k8s.io/ingress-nginx CVE-2023-5043: high 7.6, EPSS 2.23%
Ingress nginx annotation injection causes arbitrary command execution
Action: Upgrade k8s.io/ingress-nginx to 1.9.0 or later.
go get k8s.io/ingress-nginx@v1.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.0 | - |
Fixed versions
| 1.9.0 |
Sources
- osv: GHSA-5wj4-wffq-3378
- https://nvd.nist.gov/vuln/detail/CVE-2023-5043
- https://github.com/kubernetes/ingress-nginx/issues/10571
- https://groups.google.com/g/kubernetes-security-announce/c/pVsXsOpxYZo
- https://security.netapp.com/advisory/ntap-20240307-0012
- http://www.openwall.com/lists/oss-security/2023/10/25/4
CVE-2023-5043 · published · modified · JSON