CVE-2021-38182

Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster.
Configurations

Configuration 1

cpe:2.3:a:kyma-project:kyma:*:*:*:*:*:*:*:*

Information

Published : 2021-12-14 04:15

Updated : 2022-07-12 05:42


NVD link : CVE-2021-38182

Mitre link : CVE-2021-38182

Products Affected
No products.
CWE
CWE-116

Improper Encoding or Escaping of Output

CWE-20