Executive brief
Ingress-nginx code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation in k8s.io/ingress-nginx
Affected products
- Go k8s.io/ingress-nginx
Junglewise Threat Intelligence
CVE-2023-5044: GO-2024-2428 - Ingress-nginx code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation in k8s.io/ingress-nginx
CVE-2023-5044 · Severity: low · CVSS 3.1 · Published 2024-06-28
Technologies: k8s.io/ingress-nginx (Go). Vendors: Go.
Related threats
- Kubernetes ingress-nginx configuration injection via annotations
- GO-2026-4426 - ingress-nginx's `rules.http.paths.path` Ingress field can be used to inject configuration into nginx in k8s.io/ingress-nginx
- GO-2026-4423 - ingress-nginx's `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to inject configuration into nginx in k8s.io/ingres
- GO-2026-4419 - ingress-nginx has Improper Check for Unusual or Exceptional Conditions in k8s.io/ingress-nginx
- GO-2026-4417 - ingress-nginx vulnerable to Allocation of Resources Without Limits or Throttling in k8s.io/ingress-nginx