CVE Intelligence

Vulnerabilidades de 3scale-sre

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de 3scale-sre: 1 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2025-64171 Alta · 8.7 CWE-862 05/11/2025
MARIN3R: Cross-Namespace Vulnerability in the Operator
MARIN3R is a lightweight, CRD based envoy control plane for kubernetes. In versions 0.13.3 and below, there is a cross-namespace secret access vulnerability in the project's DiscoveryServiceCertificate which allows users to bypass RBAC and access secrets in unauthorized namespaces. This issue is fixed in version 0.13.4.