Description (CNA)
Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Kyverno / Kyverno | affected 1.16.0 |
CWE
No CWE identifiers supplied.
References
- https://github.com/kyverno/kyverno
- https://kb.cert.org/vuls/id/655822
- https://portswigger.net/web-security/ssrf
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.