← All advisories

High severityNVD Advisory· Published Oct 25, 2023· Updated Jun 12, 2025

Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation

CVE-2023-5044

Description

Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
k8s.io/ingress-nginxGo	< 1.9.0	1.9.0

Affected products

20

osv-coords19 versions
pkg:apk/chainguard/ingress-nginx-controller pkg:apk/chainguard/ingress-nginx-controller-1.15 pkg:apk/chainguard/ingress-nginx-controller-1.9 pkg:apk/chainguard/ingress-nginx-controller-compat pkg:apk/chainguard/ingress-nginx-controller-compat-1.9 pkg:apk/chainguard/ingress-nginx-controller-compat-fips-1.9 pkg:apk/chainguard/ingress-nginx-controller-fips pkg:apk/chainguard/ingress-nginx-controller-fips-1.15 pkg:apk/chainguard/ingress-nginx-controller-fips-1.9 pkg:apk/chainguard/ingress-nginx-controller-fips-compat pkg:apk/chainguard/kube-webhook-certgen pkg:apk/chainguard/kube-webhook-certgen-1.9 pkg:apk/chainguard/kube-webhook-certgen-fips pkg:apk/chainguard/kube-webhook-certgen-fips-1.9 pkg:apk/wolfi/ingress-nginx-controller pkg:apk/wolfi/ingress-nginx-controller-1.15 pkg:apk/wolfi/ingress-nginx-controller-compat pkg:apk/wolfi/kube-webhook-certgen pkg:golang/k8s.io/ingress-nginx
< 0+ 18 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.9.0
Cri O/Ingress Nginxv5
Range: 0

Patches

Vulnerability mechanics

References

7

github.com/advisories/GHSA-fp9f-44c2-cw27ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-5044ghsaADVISORY
www.openwall.com/lists/oss-security/2023/10/25/3ghsaWEB
github.com/kubernetes/ingress-nginx/issues/10572ghsaissue-trackingWEB
groups.google.com/g/kubernetes-security-announce/c/ukuYYvRNel0ghsamailing-listWEB
security.netapp.com/advisory/ntap-20240307-0012ghsaWEB
security.netapp.com/advisory/ntap-20240307-0012/mitre

News mentions

0

No linked articles in our index yet.