High severity7.6NVD Advisory· Published Oct 25, 2023· Updated Jun 17, 2026
CVE-2023-5044
CVE-2023-5044
Description
Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
k8s.io/ingress-nginxGo | < 1.9.0 | 1.9.0 |
Affected products
27cpe:2.3:a:kubernetes:ingress-nginx:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:kubernetes:ingress-nginx:*:*:*:*:*:*:*:*range: <1.9.0
- (no CPE)range: 0
- osv-coords25 versionspkg:apk/chainguard/ingress-nginx-controllerpkg:apk/chainguard/ingress-nginx-controller-1.13pkg:apk/chainguard/ingress-nginx-controller-1.14pkg:apk/chainguard/ingress-nginx-controller-1.15pkg:apk/chainguard/ingress-nginx-controller-1.9pkg:apk/chainguard/ingress-nginx-controller-compatpkg:apk/chainguard/ingress-nginx-controller-compat-1.9pkg:apk/chainguard/ingress-nginx-controller-compat-fips-1.9pkg:apk/chainguard/ingress-nginx-controller-fipspkg:apk/chainguard/ingress-nginx-controller-fips-1.13pkg:apk/chainguard/ingress-nginx-controller-fips-1.14pkg:apk/chainguard/ingress-nginx-controller-fips-1.15pkg:apk/chainguard/ingress-nginx-controller-fips-1.9pkg:apk/chainguard/ingress-nginx-controller-fips-compatpkg:apk/chainguard/kube-webhook-certgenpkg:apk/chainguard/kube-webhook-certgen-1.9pkg:apk/chainguard/kube-webhook-certgen-fipspkg:apk/chainguard/kube-webhook-certgen-fips-1.9pkg:apk/wolfi/ingress-nginx-controllerpkg:apk/wolfi/ingress-nginx-controller-1.13pkg:apk/wolfi/ingress-nginx-controller-1.14pkg:apk/wolfi/ingress-nginx-controller-1.15pkg:apk/wolfi/ingress-nginx-controller-compatpkg:apk/wolfi/kube-webhook-certgenpkg:golang/k8s.io/ingress-nginx
< 0+ 24 more
- (no CPE)range: < 0
- (no CPE)range: < 1.13.9-r14
- (no CPE)range: < 1.14.5-r16
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.13.9-r12
- (no CPE)range: < 1.14.5-r12
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.13.9-r14
- (no CPE)range: < 1.14.5-r16
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.9.0
Patches
Vulnerability mechanics
References
7- www.openwall.com/lists/oss-security/2023/10/25/3nvdMailing ListThird Party AdvisoryWEB
- github.com/advisories/GHSA-fp9f-44c2-cw27ghsaADVISORY
- github.com/kubernetes/ingress-nginx/issues/10572nvdIssue TrackingMitigationVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2023-5044ghsaADVISORY
- groups.google.com/g/kubernetes-security-announce/c/ukuYYvRNel0nvdMailing ListMitigationWEB
- security.netapp.com/advisory/ntap-20240307-0012ghsaWEB
- security.netapp.com/advisory/ntap-20240307-0012/nvd
News mentions
0No linked articles in our index yet.