Threats tagged 'ghsa-m63v-2g9w-2w6v'

A security vulnerability in Fission's Environment CRD allows bypassing PodSpec hardening controls by exploiting the standalone Runtime.Container and Builder.Container SecurityContext fields. This flaw permits creation of privileged pods or containers with dangerous capabilities, potentially enabling container escape and cluster compromise. The issue arises because validation and sanitization functions do not cover these standalone container fields, allowing attackers with Environment create/update RBAC to escalate privileges. The vulnerability is fixed in Fission version 1.24.0.