Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service (DoS) via a special file such as /dev/urandom, via symlinks. No version of Tiller is known to be impacted. This is a client-only issue.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
helm 后置链接漏洞
Vulnerability Description
helm是一款Kubernetes包管理器。 Helm 2.15.2之前的2.x版本中存在后置链接漏洞。攻击者可借助特制符号链接利用该漏洞获取敏感信息，或导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A