← All advisories

High severity7.4OSV Advisory· Published Mar 21, 2025· Updated Jun 17, 2026

CVE-2024-53350

CVE-2024-53350

Description

Insecure permissions in kubeslice v1.3.1 allow attackers to gain access to the service account's token, leading to escalation of privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Kubeslice/KubesliceOSV3 versions
botkube-v1.0.0, cert-manager-v1.7.0, istio-base-1.13.3, …+ 2 more
- (no CPE)range: botkube-v1.0.0, cert-manager-v1.7.0, istio-base-1.13.3, …
- cpe:2.3:a:kubeslice:kubeslice:*:*:*:*:*:*:*:*range: <=1.3.1
- (no CPE)range: <1.3.1

Patches

Vulnerability mechanics

References

2

gist.github.com/HouqiyuA/1cb964206e0d6bebd1c57a124c55fa03nvdThird Party Advisory
kubeslice.io/documentation/open-source/1.3.0nvdProduct

News mentions

0

No linked articles in our index yet.