High severityNVD Advisory· Published Oct 25, 2023· Updated Feb 13, 2025
Ingress nginx annotation injection causes arbitrary command execution
CVE-2023-5043
Description
Ingress nginx annotation injection causes arbitrary command execution.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
k8s.io/ingress-nginxGo | < 1.9.0 | 1.9.0 |
Affected products
1- Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- github.com/advisories/GHSA-5wj4-wffq-3378ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2023-5043ghsaADVISORY
- www.openwall.com/lists/oss-security/2023/10/25/4ghsaWEB
- github.com/kubernetes/ingress-nginx/issues/10571ghsaissue-trackingWEB
- groups.google.com/g/kubernetes-security-announce/c/pVsXsOpxYZoghsamailing-listWEB
- security.netapp.com/advisory/ntap-20240307-0012ghsaWEB
- security.netapp.com/advisory/ntap-20240307-0012/mitre
News mentions
0No linked articles in our index yet.