Threats tagged 'ghsa-gx55-f84r-v3r7'

Fission's Environment Custom Resource Definition (CRD) allowed users with create/update permissions to specify pod specifications that could enable privileged pods with host network, host PID, and other sensitive capabilities. This flaw enabled potential node escape and full node compromise. The vulnerability was fixed in Fission version 1.24.0 by adding admission denylist checks and sanitizing pod specs during merge. Prior to this fix, Kubernetes Pod Security Admission did not prevent these privileged pod creations due to missing enforcement labels on relevant namespaces.