Threats tagged 'ghsa-xhjh-q6rj-vw2f'

A security vulnerability in ingress-nginx allows users with permission to create an Ingress resource to cause a denial of service (DoS) in the ingress-nginx data plane or potentially redirect traffic from other Ingresses. This occurs due to a missing check on the mirror-target Ingress annotation, which can be exploited to write to an unauthenticated configuration API within the ingress-nginx controller. The corrupted configuration causes all ingress-nginx traffic to be dropped until the configuration is corrected or the controller is restarted. While traffic redirection is theoretically possible, it requires privileged knowledge and does not increase risk beyond existing capabilities.