CVE-2023-5044

Go/k8s.io/ingress-nginx CVE-2023-5044: high 7.6, EPSS 56.61%

Ingress-nginx code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation

Action: Upgrade k8s.io/ingress-nginx to 1.9.0 or later.

go get k8s.io/ingress-nginx@v1.9.0

Affected

Fixed versions

Sources

• osv: GHSA-fp9f-44c2-cw27
• https://nvd.nist.gov/vuln/detail/CVE-2023-5044
• https://github.com/kubernetes/ingress-nginx/issues/10572
• https://github.com/kubernetes/ingress-nginx
• https://groups.google.com/g/kubernetes-security-announce/c/ukuYYvRNel0
• https://security.netapp.com/advisory/ntap-20240307-0012
• http://www.openwall.com/lists/oss-security/2023/10/25/3

CVE-2023-5044 · published 2023-10-25T21:30:33Z · modified 2026-09-10T03:50:03.744445777Z · JSON

Go/k8s.io/ingress-nginx CVE-2023-5044: unknown, EPSS 56.61%

Ingress-nginx code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation in k8s.io/ingress-nginx

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2024-2428
• https://github.com/advisories/GHSA-fp9f-44c2-cw27
• https://nvd.nist.gov/vuln/detail/CVE-2023-5044
• http://www.openwall.com/lists/oss-security/2023/10/25/3
• https://github.com/kubernetes/ingress-nginx/issues/10572
• https://groups.google.com/g/kubernetes-security-announce/c/ukuYYvRNel0
• https://security.netapp.com/advisory/ntap-20240307-0012

CVE-2023-5044 · published 2024-06-28T15:28:53Z · modified 2026-05-20T08:11:48.839696883Z · JSON