This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.

[TLP:CLEAR] ingress-nginx for Kubernetes fixes 5 vulnerabilities

ingress-nginx, a controller for Kubernetes, fixes 5 vulnerabilities in versions 1.11.5 and 1.12.1 [1].

Kubernetes ingress-nginx - secrets leak (CVE-2025-1974)
CVSS 9.8 (Critical)

An unauthenticated remote attacker with access to the pod network can, under certain circumstances, view sensitive data (Secrets), which may lead to code execution [2].

The vulnerability is present in product:

  • Kubernetes ingress-nginx; >=1.11, <1.11.5; ==1.12;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 24. 3. 2025.

Kubernetes ingress-nginx - unauthorized configuration change (CVE-2025-1098, CVE-2025-1097, CVE-2025-24514)
CVSS 8.8 (High)

An authenticated remote attacker can arbitrarily modify the configuration of the machine, which may result in unauthorized access to sensitive data (Secrets) and code execution [3][4][5].

The vulnerability is present in product:

  • Kubernetes ingress-nginx; >=1.11, <1.11.5; ==1.12;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 24. 3. 2025.

Kubernetes ingress-nginx - directory traversal (CVE-2025-24513)
CVSS 4.8 (Medium)

By uploading a file with a specially crafted name, an unauthenticated remote attacker can cause a DoS attack and, under certain circumstances, access sensitive data [6].

The vulnerability is present in product:

  • Kubernetes ingress-nginx; >=1.11, <1.11.5; ==1.12;

CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

More information:

The vulnerability was publicly disclosed 24. 3. 2025.

By CESNET, z.s.p.o. Martin Krajči on 26. 3. 2025.

CESNET, z.s.p.o. Logo