Junglewise Threat Intelligence

CVE-2023-29018: GO-2023-1721 - OpenFeature Operator vulnerable to Cluster-level Privilege Escalation in github.com/open-feature/open-feature-operator

CVE-2023-29018 · Severity: low · CVSS 3.1 · Published 2024-08-20

Vendors: Go.

Executive brief

OpenFeature Operator vulnerable to Cluster-level Privilege Escalation in github.com/open-feature/open-feature-operator

Affected products

Go github.com/open-feature/open-feature-operator

Related threats

The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and earlier, a tenant who can create a contr