VDB
CVE-2025-24513
CVE-2025-24513
PUBLISHED
CVSS 4.800000190734863 MEDIUM
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided data are included in a filename by the ingress-nginx Admission Controller feature, resulting in directory traversal within the container. This could result in denial of service, or when combined with other vulnerabilities, limited disclosure of Secret objects from the cluster.
EPSS 3.53% · 88.6th percentile
Risk Scores
CVSS 3.1
4.800000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
EPSS Score
3.53%
88.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | nginx-ingress-controller | 0, 1.12.0 |
| Bitnami | nginx-ingress-controller | 1.12.0, 0 |
Timeline
- Mar 24, 2025 CVE Published
- Mar 25, 2025 EPSS Score
- Mar 25, 2025 Coalition ESS Score
- Mar 28, 2025 Coalition ESS Score
- Apr 7, 2025 EPSS Score
- Apr 21, 2025 EPSS Score
- May 4, 2025 EPSS Score
- May 17, 2025 EPSS Score
- May 30, 2025 EPSS Score
- Jun 13, 2025 EPSS Score
- Jun 26, 2025 EPSS Score
- Jul 9, 2025 EPSS Score