CVE Intelligence

Vulnerabilidades do 3scale-sre Marin3r

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam 3scale-sre Marin3r: 1 registro(s), com versões afetadas e correções.

CVE-2025-64171 Alta · 8.7 CWE-862 05/11/2025
MARIN3R: Cross-Namespace Vulnerability in the Operator
MARIN3R is a lightweight, CRD based envoy control plane for kubernetes. In versions 0.13.3 and below, there is a cross-namespace secret access vulnerability in the project's DiscoveryServiceCertificate which allows users to bypass RBAC and access secrets in unauthorized namespaces. This issue is fixed in version 0.13.4.