Threats tagged 'ghsa-j68q-wq49-88gg'

Kyverno versions before 1.19.1 contain a critical vulnerability in the validation of URL-encoded path segments within the Policy apiCall urlPath. This flaw allows namespace tenants to bypass namespace restrictions and create objects in other namespaces using percent-encoded directory traversal sequences. Exploitation can lead to creation of MutatingWebhookConfiguration objects cluster-wide or PolicyException objects in the kyverno namespace, resulting in privilege escalation to cluster admin.