Skip to content

[GHSA-qh36-44jv-c8xj] Potential proxy IP restriction bypass in Kubernetes#4656

Merged
advisory-database[bot] merged 1 commit intoenj/advisory-improvement-4656from
enj-GHSA-qh36-44jv-c8xj
Aug 6, 2024
Merged

[GHSA-qh36-44jv-c8xj] Potential proxy IP restriction bypass in Kubernetes#4656
advisory-database[bot] merged 1 commit intoenj/advisory-improvement-4656from
enj-GHSA-qh36-44jv-c8xj

Conversation

@enj
Copy link
Copy Markdown

@enj enj commented Aug 6, 2024

Updates

  • Affected products
  • Description

Comments
Per kubernetes/kubernetes#101493 (comment) -> all versions are impacted and there is no fix in place

@github-actions github-actions bot changed the base branch from main to enj/advisory-improvement-4656 August 6, 2024 20:41
@CallmeMari
Copy link
Copy Markdown

Hi @enj, thank you for your contribution to GitHub's Advisory Database. The advisory currently has four different vulnerable version ranges for the 1.21.x, 1.20.x, 1.19.x and 1.18.x branches. For clarity, are all of those still affected and without fix?

@enj
Copy link
Copy Markdown
Author

enj commented Aug 6, 2024

Hi @CallmeMari, all versions of Kube past and present are impacted as the issue has existed since the beginning and no fix has ever been implemented. @micahhausler will update the related issue to reflect this.

@advisory-database advisory-database bot merged commit 658dfc6 into enj/advisory-improvement-4656 Aug 6, 2024
@advisory-database
Copy link
Copy Markdown
Contributor

Hi @enj! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!

@advisory-database advisory-database bot deleted the enj-GHSA-qh36-44jv-c8xj branch August 6, 2024 23:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants