CVE-2021-25742 — Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster.
Published: 2021-10-29 · CVSS: 7.6 · CVSS 3.1
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7