Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
kyma 输入验证错误漏洞
Vulnerability Description
kyma是开源的一个使用微服务和无服务器功能扩展应用程序的平台。 Kyma 存在安全漏洞，该漏洞源于输入验证不足，经过身份验证的用户可以传递他们选择的 Header 并升级可能完全危害集群的权限。
CVSS Information
N/A
Vulnerability Type
N/A