Go/github.com/cilium/cilium-cli CVE-2023-28114: medium 4.8, EPSS 0.19%
`cilium-cli` disables etcd authorization for clustermesh clusters
Action: Upgrade github.com/cilium/cilium-cli to 0.13.2 or later.
go get github.com/cilium/cilium-cli@v0.13.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.13.2 | - |
Fixed versions
| 0.13.2 |
Sources
- osv: GHSA-6f27-3p6c-p5jc
- https://github.com/cilium/cilium-cli/security/advisories/GHSA-6f27-3p6c-p5jc
- https://nvd.nist.gov/vuln/detail/CVE-2023-28114
- https://github.com/cilium/cilium-cli/commit/fb1427025764e1eebc4a7710d902c4f22cae2610
- https://artifacthub.io/packages/helm/cilium/cilium
- https://github.com/cilium/cilium-cli
- https://github.com/cilium/cilium-cli/releases/tag/v0.13.2
CVE-2023-28114 · published · modified · JSON