HexBrain
Sign in

Browse / Kubernetes

Kubernetes

77disclosed reports
$32,650paid in bounties

See its reports on the map

What gets reported to Kubernetes

Most upvoted reports

AllValidInformativeN/ADuplicate

  1. Node disk DOS by writing to container /etc/hostsUncontrolled Resource Consumption · medium
    $1,000161 votes
  2. Injection in path parameter of Ingress-nginxCode Injection · high
    91 votes
  3. elections.k8s.io uses weak session secret key, may place elections at riskCryptographic Issues - Generic · high
    $25086 votes
  4. Bypass validation parts in AWS IAM Authenticator for KubernetesImproper Authentication - Generic · high
    $2,50068 votes
  5. CVE-2023-5528: Insufficient input sanitization in in-tree storage plugin leads to privilege escalation on Windows nodesCode Injection · high
    $5,00067 votes
  6. Subdomain Takeover Via via Dangling NS records on Amazon Route 53 http://api.e2e-kops-aws-canary.test-cncf-aws.canary.k8s.ioImproper Authentication - Generic · medium
    $25062 votes
  7. Ingress nginx annotation injection causes arbitrary command executionCode Injection · high
    $2,50057 votes
  8. Authenticated kubernetes principal with restricted permissions can retrieve ingress-nginx serviceaccount token and secrets across all namespacesPrivilege Escalation · high
    55 votes
  9. Privilege Escalation in kOps using GCE/GCP ProviderPrivilege Escalation · high
    $2,50052 votes
  10. SSRF vulnerability can be exploited when a hijacked aggregated api server such as metrics-server returns 30XServer-Side Request Forgery (SSRF) · medium
    $1,00051 votes
  11. RCE on ingress-nginx-controller via Ingress spec.rules.http.paths.path fieldCode Injection · high
    $2,50047 votes
  12. Loading YAML in Java client can lead to command executionDeserialization of Untrusted Data · medium
    $1,00045 votes
  13. Code inject via nginx.ingress.kubernetes.io/permanent-redirect annotationCode Injection · high
    $2,50040 votes
  14. monitoring.prow-canary.k8s.io is vulnerable to CVE-2022-21703 (Grafana 0-day)Cross-Site Request Forgery (CSRF) · low
    $10036 votes
  15. Ingress-nginx annotation injection allows retrieval of ingress-nginx serviceaccount token and secrets across all namespacesCode Injection · high
    34 votes
  16. Development Application Credentials + Information ExposedDuplicateCleartext Storage of Sensitive Information · high
    31 votes
  17. File Read Vulnerability allows Attackers to Compromise S3 buckets using ProwImproper Access Control - Generic · medium
    $25026 votes
  18. SSRF for kube-apiserver cloudprovider sceneServer-Side Request Forgery (SSRF) · medium
    24 votes
  19. Half-Blind SSRF found in kube/cloud-controller-manager can be upgraded to complete SSRF (fully crafted HTTP requests) in vendor managed k8s service.Server-Side Request Forgery (SSRF) · high
    $5,00021 votes
  20. Broken link hijacking in https://kubernetes-csi.github.io/docs/drivers.html?highlight=chubaofs#production-driversInsecure Temporary File · low
    $10018 votes
  21. Broken Domain Link Takeover from kubernetes.io docsInsecure Temporary File · low
    $10017 votes
  22. Ingress-nginx path allows retrieval of ingress-nginx serviceaccount tokenPrivilege Escalation · high
    $2,50017 votes
  23. Code Injection via Insecure Yaml.loadCode Injection · low
    $25017 votes
  24. Github Account Takeover from Docs page of `kubernetes-csi.github.io`Improper Access Control - Generic · low
    16 votes
  25. Attacker can bypass authentication build on ingress external auth (`nginx.ingress.kubernetes.io/auth-url`)InformativeImproper Authentication - Generic · medium
    16 votes
  26. Blind SSRF on velodrome.canary.k8s.ioServer-Side Request Forgery (SSRF) · low
    16 votes
  27. csi-snapshot-controller crashes when processing VolumeSnapshot with non-existing PVCNULL Pointer Dereference · medium
    $50015 votes
  28. Git Arg Injection in kubernetes-sigs/release-sdk Code Injection · low
    $10014 votes
  29. Google storage bucket takeover which is used to load JS file in dashboard.html in "github.com/kubernetes/release" which can lead to XSSImproper Access Control - Generic · medium
    14 votes
  30. Node Validation Admission does not observe all oldObject fieldsImproper Access Control - Generic · medium
    14 votes
  31. Index Out Of Bounds in protobuf unmarshallingBuffer Over-read
    $25013 votes
  32. Route53 Subdomain Takeover on test-cncf-aws.canary.k8s.ioDuplicateMisconfiguration · high
    13 votes
  33. Broken Link Hijacking on kubernetes.io DocumentationImproper Access Control - Generic · low
    12 votes
  34. Username enumeration via Openssh 7.6InformativeInformation Disclosure · medium
    12 votes
  35. SHA512 incorrect on most/many releasesCryptographic Issues - Generic · medium
    11 votes
  36. The `io.kubernetes.client.util.generic.dynamic.Dynamics` contains a code execution vulnerability due to SnakeYAMLCode Injection · medium
    $1,00010 votes
  37. Compromise of node can lead to compromise of pods on other nodesmedium
    10 votes
  38. IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisementsMan-in-the-Middle · medium
    10 votes
  39. XSS on kubernetes-csi.github.io (mdBook)InformativeCross-site Scripting (XSS) - Reflected · medium
    9 votes
  40. Kubelet resource exhaustion attack via metric label cardinality explosion from unauthenticated requestsUncontrolled Resource Consumption · medium
    9 votes
  41. Compromise of auth via subset/superset namespace names.Authentication Bypass Using an Alternate Path or Channel · medium
    8 votes
  42. Tokenless GUI AuthenticationImproper Authentication - Generic · medium
    7 votes
  43. kubeadm logs tokens before deleting themInsufficiently Protected Credentials · low
    7 votes
  44. Bypass apiserver proxy filterTime-of-check Time-of-use (TOCTOU) Race Condition · medium
    7 votes
  45. Broken Link Takeover from kubernetes.io docsImproper Access Control - Generic · low
    6 votes
  46. DoS for client-go jsonpath funcUncontrolled Resource Consumption · low
    6 votes
  47. Grafana Improper authorization Improper Authorization · low
    6 votes
  48. AWS Load Balancer Controller Managed Security Groups can be replaced by an unprivileged attackerN/AResource Injection · medium
    $5005 votes
  49. Holes in EndpointSlice Validation Enable Host Network HijackPrivilege Escalation · low
    5 votes
  50. KOPS documentation references domains which were not registeredPrivilege Escalation · low
    5 votes
  51. ClickjackingInformativeUI Redressing (Clickjacking)
    5 votes
  52. No valid SPF record foundN/AImproper Authentication - Generic
    5 votes
  53. Broken Github Link Used in deployment docs of "github.com/kubernetes/kompose"Improper Access Control - Generic · medium
    4 votes
  54. Broken link hijacing in https://kubernetes-csi.github.io/docs/drivers.htmlViolation of Secure Design Principles · medium
    4 votes
  55. Unsecured Grafana instance on https://monitoring.prow-canary.k8s.io/dashboardsDuplicateImproper Authentication - Generic · high
    4 votes
  56. Man in the middle leading to root privilege escalation using hostNetwork=true (CAP_NET_RAW considered harmful)InformativeMan-in-the-Middle · medium
    4 votes
  57. Private RSA key and Server key exposed on the GitHub repositoryN/ACleartext Storage of Sensitive Information · medium
    4 votes
  58. DoS for GCSArtifact.RealAllUncontrolled Resource Consumption · medium
    4 votes
  59. AWS Load Balancer Controller can be used by an attacker to modify rules of any Security Group that they are able to tagN/AResource Injection · medium
    $5003 votes
  60. secret leaks in vsphere cloud controller manager logCleartext Storage of Sensitive Information · medium
    $5003 votes
  61. Fake email from <any_name>@kubernetes.io to any other emailDuplicate
    3 votes
  62. API Server DoS (crash?) if many large resources (~1MB each) are concurrently/repeatedly sent to an external Validating WebHook endpointInformativeUncontrolled Resource Consumption · medium
    2 votes
  63. exposed Git Repo at http://api.e2e-kops-aws-canary.test-cncf-aws.canary.k8s.io/.git/DuplicateInformation Disclosure · high
    2 votes
  64. "Self" DOS with large deployment and scalingN/AUncontrolled Resource Consumption · low
    2 votes
  65. Github test clientID and clientSecret leakedInformativePlaintext Storage of a Password · low
    2 votes
  66. Man in the middle using LoadBalancer or ExternalIPs servicesMan-in-the-Middle · medium
    2 votes
  67. kubectl creating secrets from stringData leaves secret in plain textInformativeCleartext Storage of Sensitive Information · low
    1 votes
  68. Kubelet follows symlinks as root in /var/log from the /logs server endpoint InformativePrivilege Escalation · medium
    1 votes
  69. csi-snapshot-controller crashes when processing VolumeSnapshot with non-existing PVCDuplicateNULL Pointer Dereference · medium
    1 votes
  70. CVE-2019-11250 remains in effect.Cleartext Storage of Sensitive Information · medium
    1 votes
  71. Private IP addresses DisclosureInformativeInformation Disclosure
    1 votes
  72. There is any issue No valid SPF RecordsDuplicateImproper Authentication - Generic
    1 votes
  73. Sensitive Information disclosure Through Config FileDuplicateInformation Disclosure
    1 votes
  74. Configuartion [Sensitive] Information DisclosureInformativeInformation Disclosure
    1 votes
  75. Hard coded Username and password in GiHub commitInformativeUse of Hard-coded Credentials
  76. Internal IP addresses range and AWS cluster region leaked in a Github repository InformativeInsecure Storage of Sensitive Information
  77. Plaintext storage of a password on kubernetes release bucketInformativePlaintext Storage of a Password