Go/k8s.io/ingress-nginx CVE-2023-5044: high 7.6, EPSS 53.69%

Ingress-nginx code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation

Action: Upgrade k8s.io/ingress-nginx to 1.9.0 or later.

go get k8s.io/ingress-nginx@v1.9.0

Affected

Fixed versions

Sources

• osv: GHSA-fp9f-44c2-cw27
• https://nvd.nist.gov/vuln/detail/CVE-2023-5044
• https://github.com/kubernetes/ingress-nginx/issues/10572
• https://github.com/kubernetes/ingress-nginx
• https://groups.google.com/g/kubernetes-security-announce/c/ukuYYvRNel0
• https://security.netapp.com/advisory/ntap-20240307-0012
• http://www.openwall.com/lists/oss-security/2023/10/25/3

CVE-2023-5044 · published 2023-10-25T21:30:33Z · modified 2026-09-10T03:50:03.744445777Z · JSON