CVE-2021-25742 - Kubernetes Ingress-nginx

Critical 7.1

A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster.

Affected software

Kubernetes Ingress-nginx

Reference links

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.