CVE List

CVE-2021-25742

Critical 7.1

A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster.

Published October 29, 2021.

Affected software

Get alerts for Kubernetes Ingress-nginx

Reference links