CVE-2025-1097

Published Mar 25, 2025

Last updated a day ago

Kubernetes

NGINX

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2025-1097 is a security vulnerability found in the ingress-nginx controller for Kubernetes. It stems from the improper sanitization of the `auth-tls-match-cn` Ingress annotation, which can be exploited to inject malicious configurations into Nginx. This vulnerability allows for arbitrary code execution within the context of the ingress-nginx controller. Furthermore, successful exploitation can lead to the disclosure of Secrets accessible to the controller, potentially granting unauthorized access to sensitive information cluster-wide.

Description: A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
Source: jordan@liggitt.net
NVD status: Received

Risk scores

CVSS 3.1

Type: Secondary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

jordan@liggitt.net: CWE-20

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 34

Overview

AI description

Risk scores

CVSS 3.1

Weaknesses

Social media

References