kyma

CVEs (2)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2021-38182	Kyma Project kyma	Hig	0.57	8.8	0.01		Dec 14, 2021	Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster.
CVE-2021-33708	Kyma Project kyma	Hig	0.57	8.8	0.01		Aug 10, 2021	Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges.

CVE-2021-38182HigDec 14, 2021
Kyma Project
kyma
risk 0.57cvss 8.8epss 0.01
Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster.
CVE-2021-33708HigAug 10, 2021
Kyma Project
kyma
risk 0.57cvss 8.8epss 0.01
Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges.