Skip to main content

Fluxcd

7 CVEs vendor

Monthly

CVE-2022-39272 Oct 22, 00:15 Go MEDIUM PATCH This Month

Flux is an open and extensible continuous delivery solution for Kubernetes. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Kubernetes Kustomize Controller Flux2 Helm Controller +5
NVD GitHub
CVSS 3.1
4.3
EPSS
0.6%
CVE-2022-36049 Sep 07, 21:15 Go HIGH PATCH This Week

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Kubernetes Helm Flux2 Helm Controller +1
NVD GitHub
CVSS 3.1
7.5
EPSS
1.0%
CVE-2022-36035 Aug 31, 15:15 Go HIGH PATCH This Week

Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration (like Git repositories), and automating updates to configuration when there is new code to deploy. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Path Traversal Kubernetes Flux2 Fluxcd
NVD GitHub
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-24878 May 06, 02:15 Go MEDIUM PATCH This Month

Flux is an open and extensible continuous delivery solution for Kubernetes. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Path Traversal Kubernetes Kustomize Controller Flux2 +1
NVD GitHub
CVSS 3.1
6.5
EPSS
0.9%
CVE-2022-24877 May 06, 01:15 Go HIGH PATCH This Week

Flux is an open and extensible continuous delivery solution for Kubernetes. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Information Disclosure Path Traversal Kubernetes Kustomize Controller +2
NVD GitHub
CVSS 3.1
8.8
EPSS
1.1%
CVE-2022-24817 May 06, 00:15 Go CRITICAL PATCH Act Now

Flux2 is an open and extensible continuous delivery solution for Kubernetes. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

Privilege Escalation RCE Kubernetes Code Injection Kustomize Controller +3
NVD GitHub
CVSS 3.1
9.9
EPSS
1.0%
CVE-2021-41254 Nov 12, 18:15 Go HIGH POC PATCH This Week

kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes manifests and assembled with Kustomize. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Kubernetes Command Injection Kustomize Controller Fluxcd
NVD GitHub
CVSS 3.1
8.8
EPSS
1.8%
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

Flux is an open and extensible continuous delivery solution for Kubernetes. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Kubernetes Kustomize Controller +7
NVD GitHub
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Kubernetes Helm +3
NVD GitHub
EPSS 0% CVSS 7.8
HIGH PATCH This Week

Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration (like Git repositories), and automating updates to configuration when there is new code to deploy. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Path Traversal Kubernetes Flux2 +1
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Flux is an open and extensible continuous delivery solution for Kubernetes. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Path Traversal Kubernetes +3
NVD GitHub
EPSS 1% CVSS 8.8
HIGH PATCH This Week

Flux is an open and extensible continuous delivery solution for Kubernetes. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Information Disclosure Path Traversal +4
NVD GitHub
EPSS 1% CVSS 9.9
CRITICAL PATCH Act Now

Flux2 is an open and extensible continuous delivery solution for Kubernetes. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

Privilege Escalation RCE Kubernetes +5
NVD GitHub
EPSS 2% CVSS 8.8
HIGH POC PATCH This Week

kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes manifests and assembled with Kustomize. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Kubernetes Command Injection Kustomize Controller +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy