🎯 New Report #2701701: Injection in path parameter of Ingress-nginx
🔺Severity: High
👽 Reporter: fisjkars
⭐️ Reputation: 334
🛠 State: resolved
💼 Team: Kubernetes
💵 Bounty: null
🕐 Submitted: 2024-09-05
⏰ Disclosed: 2026-03-07 05:10:30
📝 Summary: A vulnerability was discovered in the Ingress-nginx controller where an attacker could inject arbitrary content into the path parameter of an Ingress. This allowed the attacker to upload a malicious nginx configuration file to the ingress controller's file system and then include that file in a subsequent Ingress. The attacker could then execute arbitrary code on the ingress controller.
📂 Report JSON File: 2701701
@hackeronereports