Mongodb Controllers For Kubernetes
Monthly
Request forgery in MongoDB Controllers for Kubernetes allows an authenticated user who can modify an OpsManager custom resource to cause unintended administrative changes in Enterprise Ops Manager when backup reconciliation is enabled. The flaw involves insufficient escaping of Ops Manager backup store identifiers when the controller builds admin API request paths. It is a low-severity issue with no public exploit identified at time of analysis, and the vendor fixed it in MongoDB Controllers for Kubernetes 1.13.0.
Request forgery in MongoDB Controllers for Kubernetes allows an authenticated user who can modify an OpsManager custom resource to cause unintended administrative changes in Enterprise Ops Manager when backup reconciliation is enabled. The flaw involves insufficient escaping of Ops Manager backup store identifiers when the controller builds admin API request paths. It is a low-severity issue with no public exploit identified at time of analysis, and the vendor fixed it in MongoDB Controllers for Kubernetes 1.13.0.