H1-776017 — Vulnetix

H1-776017 PUBLISHED CVSS 8.800000190734863 HIGH

Half-Blind SSRF found in kube/cloud-controller-manager can be upgraded to complete SSRF (fully crafted HTTP requests) in vendor managed k8s service.

Risk Scores

CVSS 3.1

8.800000190734863

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Exploit Intelligence

Half-Blind SSRF found in kube/cloud-controller-manager can be upgraded to complete SSRF (fully crafted HTTP requests) in vendor managed k8s service. (hackerone)
Half-Blind SSRF found in kube/cloud-controller-manager can be upgraded to complete SSRF (fully crafted HTTP requests) in vendor managed k8s service. (hackerone)
CVE.json (github-poc)
cve_db.json (github-poc)

Timeline

Oct 30, 2020 CVE Published
Oct 30, 2020 PoC Published

References

Half-Blind SSRF found in kube/cloud-controller-manager can be upgraded to complete SSRF (fully crafted HTTP requests) in vendor managed k8s service. advisory

Open in Interactive Console →

$ Console Community · 100/wk Open console ›