未評価
In Lens prior to 5.3.4, custom helm chart configuration creates helm commands from string concatenation of provided arguments which are then executed...
CVE-2021-23154
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
In Lens prior to 5.3.4, custom helm chart configuration creates helm commands from string concatenation of provided arguments which are then executed in the user's shell. Arguments can be provided which cause arbitrary shell commands to run on the system.
参照URL
- advisory github.com