CVE-2023-30617
1 advisory.
Go/github.com/openkruise/kruise CVE-2023-30617: medium 6.5
Kruise allows leveraging the kruise-daemon pod to list all secrets in the entire cluster
Action: Upgrade github.com/openkruise/kruise to 1.3.1 or later.
go get github.com/openkruise/kruise@v1.3.1go get github.com/openkruise/kruise@v1.4.1go get github.com/openkruise/kruise@v1.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.8.0 | 1.3.1 | - |
| 1.4.0 | 1.4.1 | - |
| 1.5.0 | 1.5.2 | - |
Fixed versions
| 1.3.1 | 1.4.1 | 1.5.2 |
Sources
- osv: GHSA-437m-7hj5-9mpw
- https://github.com/openkruise/kruise/security/advisories/GHSA-437m-7hj5-9mpw
- https://nvd.nist.gov/vuln/detail/CVE-2023-30617
- https://github.com/openkruise/kruise
CVE-2023-30617 · published · modified · JSON