[GHSA-5wj4-wffq-3378] Ingress nginx annotation injection causes arbitrary command execution

[r0binak]

Updates

• Add working PoC

Comments
Add PoC

[shelbyc]

Hi @r0binak, I see that this proof of concept is published at https://github.com/r0binak/CVE-2023-5043. Because Kubernetes issued the CVE for this vulnerability, I suggest contacting Kubernetes's CNA email, [email protected], to request that they add https://github.com/r0binak/CVE-2023-5043 as a CVE reference link. If Kubernetes accepts https://github.com/r0binak/CVE-2023-5043 as a reference, the link will eventually be ingested by the GitHub Advisory Database.

[taladrane]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.

[taladrane]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.

[taladrane]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.