Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
115 results · page 2 of 3
Jun 6, 2023An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3.CVE-2023-0985 · Other software · MB Connect Line · reported by info@cert.vde.comHigh 8.8
An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An authenticated remote user with low privileges can change the password of any user in the same account. This allows to take over the admin user and therefore fully compromise the account.
- Product
- mbCONNECT24
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Feb 8, 2023Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm template function introduced in Helm v3.CVE-2023-25165 · Other software · helm · reported by GitHubMedium 4.3
Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm template function introduced in Helm v3. The function is able to accept a hostname and return an IP address for that hostname. To get the IP address the function performs a DNS lookup. The DNS lookup happens when used with `helm install|upgrade|template` or when the Helm SDK is used to render a chart. Information passed into the chart can be disclosed to the DNS servers used to lookup the IP address. For example, a malicious chart could inject `getHostByName` into a chart in order to disclose values to a malicious DNS server. The issue has been fixed in Helm 3.11.1. Prior to using a chart with Helm verify the `getHostByName` function is not being used in a template to disclose any information you do not want passed to DNS servers.
- Product
- helm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 13, 2023Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_helmet.CVE-2022-46949 · Other software · Helmet Store Showroom Site Project · reported by MITREHigh 7.2
Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_helmet.
- Product
- Helmet Store Showroom Site
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 13, 2023Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_category.CVE-2022-46947 · Other software · Helmet Store Showroom Site Project · reported by MITREHigh 7.2
Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_category.
- Product
- Helmet Store Showroom Site
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 13, 2023Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_brand.CVE-2022-46946 · Other software · Helmet Store Showroom Site Project · reported by MITREHigh 7.2
Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_brand.
- Product
- Helmet Store Showroom Site
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 12, 2023Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /hss/classes/Users.php?f=delete.CVE-2022-46472 · Other software · Helmet Store Showroom Site Project · reported by MITREHigh 7.2
Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /hss/classes/Users.php?f=delete.
- Product
- Helmet Store Showroom Site
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 15, 2022Helm is a tool for managing Charts, pre-configured Kubernetes resources.CVE-2022-23526 · Other software · helm · reported by GitHubMedium 5.3
Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the_chartutil_ package that can cause a segmentation violation. The _chartutil_ package contains a parser that loads a JSON Schema validation file. For example, the Helm client when rendering a chart will validate its values with the schema file. The _chartutil_ package parses the schema file and loads it into structures Go can work with. Some schema files can cause array data structures to be created causing a memory violation. Applications that use the _chartutil_ package in the Helm SDK to parse a schema file can suffer a Denial of Service when that input causes a panic that cannot be recovered from. Helm is not a long running service so the panic will not affect future uses of the Helm client. This issue has been patched in 3.10.3. SDK users can validate schema files that are correctly formatted before passing them to the _chartutil_ functions.
- Product
- helm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 15, 2022Helm is a tool for managing Charts, pre-configured Kubernetes resources.CVE-2022-23525 · Other software · helm · reported by GitHubMedium 5.3
Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the _repo_package. The _repo_ package contains a handler that processes the index file of a repository. For example, the Helm client adds references to chart repositories where charts are managed. The _repo_ package parses the index file of the repository and loads it into structures Go can work with. Some index files can cause array data structures to be created causing a memory violation. Applications that use the _repo_ package in the Helm SDK to parse an index file can suffer a Denial of Service when that input causes a panic that cannot be recovered from. The Helm Client will panic with an index file that causes a memory violation panic. Helm is not a long running service so the panic will not affect future uses of the Helm client. This issue has been patched in 3.10.3. SDK users can validate index files that are correctly formatted before passing them to the _repo_ functions.
- Product
- helm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 15, 2022Helm is a tool for managing Charts, pre-configured Kubernetes resources.CVE-2022-23524 · Other software · helm · reported by GitHubMedium 5.3
Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to Uncontrolled Resource Consumption, resulting in Denial of Service. Input to functions in the _strvals_ package can cause a stack overflow. In Go, a stack overflow cannot be recovered from. Applications that use functions from the _strvals_ package in the Helm SDK can have a Denial of Service attack when they use this package and it panics. This issue has been patched in 3.10.3. SDK users can validate strings supplied by users won't create large arrays causing significant memory usage before passing them to the _strvals_ functions.
- Product
- helm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 2022Helmet Store Showroom v1.0 vulnerable to unauthenticated SQL Injection.CVE-2022-46072 · Other software · Helmet Store Showroom Project · reported by MITRECritical 9.8
Helmet Store Showroom v1.0 vulnerable to unauthenticated SQL Injection.
- Product
- Helmet Store Showroom
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordyoutube.comyuyudhn.github.io
Dec 14, 2022There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page.CVE-2022-46071 · Other software · Helmet Store Showroom Site Project · reported by MITRECritical 9.8
There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability can be exploited to bypass admin access.
- Product
- Helmet Store Showroom Site
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordyoutube.comyuyudhn.github.io
Dec 14, 2022Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=delete_product.CVE-2022-46127 · Other software · Helmet Store Showroom Site Project · reported by MITREHigh 7.2
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=delete_product.
- Product
- Helmet Store Showroom Site
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 2022Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/brands/manage_brand.php?id=.CVE-2022-46126 · Other software · Helmet Store Showroom Site Project · reported by MITREHigh 7.2
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/brands/manage_brand.php?id=.
- Product
- Helmet Store Showroom Site
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 2022Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manage_client&id=.CVE-2022-46125 · Other software · Helmet Store Showroom Site Project · reported by MITREHigh 7.2
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manage_client&id=.
- Product
- Helmet Store Showroom Site
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 2022Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=user/manage_user&id=.CVE-2022-46124 · Other software · Helmet Store Showroom Site Project · reported by MITREHigh 7.2
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=user/manage_user&id=.
- Product
- Helmet Store Showroom Site
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 2022Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/manage_category.php?id=.CVE-2022-46123 · Other software · Helmet Store Showroom Site Project · reported by MITREHigh 7.2
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/manage_category.php?id=.
- Product
- Helmet Store Showroom Site
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 2022Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/view_category.php?id=.CVE-2022-46122 · Other software · Helmet Store Showroom Site Project · reported by MITREHigh 7.2
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/view_category.php?id=.
- Product
- Helmet Store Showroom Site
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 2022Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/manage_product&id=.CVE-2022-46121 · Other software · Helmet Store Showroom Site Project · reported by MITREHigh 7.2
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/manage_product&id=.
- Product
- Helmet Store Showroom Site
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 2022Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/view_product&id=.CVE-2022-46120 · Other software · Helmet Store Showroom Site Project · reported by MITREHigh 7.2
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/view_product&id=.
- Product
- Helmet Store Showroom Site
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 2022Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=categories&c=.CVE-2022-46119 · Other software · Helmet Store Showroom Site Project · reported by MITREHigh 7.2
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=categories&c=.
- Product
- Helmet Store Showroom Site
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 2022Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=product_per_brand&bid=.CVE-2022-46118 · Other software · Helmet Store Showroom Site Project · reported by MITREHigh 7.2
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=product_per_brand&bid=.
- Product
- Helmet Store Showroom Site
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 2022Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=view_product&id=.CVE-2022-46117 · Other software · Helmet Store Showroom Site Project · reported by MITREHigh 7.2
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=view_product&id=.
- Product
- Helmet Store Showroom Site
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 2022Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF).CVE-2022-46074 · Other software · Helmet Store Showroom Project · reported by MITREHigh 8.8
Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF). An unauthenticated user can add an admin account due to missing CSRF protection.
- Product
- Helmet Store Showroom
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordyoutube.comyuyudhn.github.io
Dec 14, 2022Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).CVE-2022-46073 · Other software · Helmet Store Showroom Project · reported by MITREMedium 6.1
Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).
- Product
- Helmet Store Showroom
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordyoutube.comyuyudhn.github.io
Sep 7, 2022Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to deCVE-2022-36049 · Other software · fluxcd · reported by GitHubHigh 7.7
Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK that affects flux2 v0.0.17 until v0.32.0 and helm-controller v0.0.4 until v0.23.0 allows for specific data inputs to cause high memory consumption. In some platforms, this could cause the controller to panic and stop processing reconciliations. In a shared cluster multi-tenancy environment, a tenant could create a HelmRelease that makes the controller panic, denying all other tenants from their Helm releases being reconciled. Patches are available in flux2 v0.32.0 and helm-controller v0.23.0.
- Product
- flux2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugs.chromium.orgbugs.chromium.org
Sep 1, 2022Helm is a tool for managing Charts.CVE-2022-36055 · Other software · helm · reported by GitHubMedium 6.5
Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the _strvals_ package that can cause an out of memory panic. The _strvals_ package contains a parser that turns strings in to Go structures. The _strvals_ package converts these strings into structures Go can work with. Some string inputs can cause array data structures to be created causing an out of memory panic. Applications that use the _strvals_ package in the Helm SDK to parse user supplied input can suffer a Denial of Service when that input causes a panic that cannot be recovered from. The Helm Client will panic with input to `--set`, `--set-string`, and other value setting flags that causes an out of memory panic. Helm is not a long running service so the panic will not affect future uses of the Helm client. This issue has been resolved in 3.9.4. SDK users can validate strings supplied by users won't create large arrays causing significant memory usage before passing them to the _strvals_ functions.
- Product
- helm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The olmax99/helm-flask-celery repository before 2022-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31549 · Other software · Helm-flask-celery Project · reported by MITRECritical 9.3
The olmax99/helm-flask-celery repository before 2022-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Helm-flask-celery
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 4, 2022Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go.CVE-2022-24348 · Other software · Argoproj · reported by MITREHigh 7.7
Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go. For example, an attacker may be able to discover credentials stored in a YAML file.
- Product
- Argo CD
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 10, 2022In Lens prior to 5.3.4, custom helm chart configuration creates helm commands from string concatenation of provided arguments which are then executed in the useCVE-2021-23154 · Other software · Mirantis · reported by psirt@mirantis.comMedium 6.3
In Lens prior to 5.3.4, custom helm chart configuration creates helm commands from string concatenation of provided arguments which are then executed in the user's shell. Arguments can be provided which cause arbitrary shell commands to run on the system.
- Product
- Lens
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 2, 2021In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 an authenticated attacker can change the CVE-2021-34574 · Other software · MB connect line · reported by info@cert.vde.comMedium 4.3
In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 an authenticated attacker can change the password of his account into a new password that violates the password policy by intercepting and modifying the request that is send to the server.
- Product
- mymbCONNECT24
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Jun 16, 2021Helm is a tool for managing Charts (packages of pre-configured Kubernetes resources).CVE-2021-32690 · Other software · helm · reported by GitHubMedium 6.8
Helm is a tool for managing Charts (packages of pre-configured Kubernetes resources). In versions of helm prior to 3.6.1, a vulnerability exists where the username and password credentials associated with a Helm repository could be passed on to another domain referenced by that Helm repository. This issue has been resolved in 3.6.1. There is a workaround through which one may check for improperly passed credentials. One may use a username and password for a Helm repository and may audit the Helm repository in order to check for another domain being used that could have received the credentials. In the `index.yaml` file for that repository, one may look for another domain in the `urls` list for the chart versions. If there is another domain found and that chart version was pulled or installed, the credentials would be passed on.
- Product
- helm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 2, 2021An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2.CVE-2020-12527 · Other software · MB connect line · reported by info@cert.vde.comMedium 6.5
An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. Improper access validation allows a logged in user to shutdown or reboot devices in his account without having corresponding permissions.
- Product
- mymbCONNECT24
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Feb 16, 2021An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2.CVE-2020-35570 · Other software · Mbconnectline · reported by MITREMedium 5.3
An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2. An unauthenticated attacker is able to access files (that should have been restricted) via forceful browsing.
- Product
- Mbconnect24
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Feb 16, 2021An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2.CVE-2020-35568 · Other software · Mbconnectline · reported by MITREMedium 4.3
An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An incomplete filter applied to a database response allows an authenticated attacker to gain non-public information about other users and devices in the account.
- Product
- Mbconnect24
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Feb 16, 2021An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2.CVE-2020-35566 · Other software · Mbconnectline · reported by MITREMedium 5.3
An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An attacker can read arbitrary JSON files via Local File Inclusion.
- Product
- Mbconnect24
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Feb 16, 2021An issue was discovered MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2.CVE-2020-35561 · Other software · Mbconnectline · reported by MITREMedium 5.3
An issue was discovered MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. There is an SSRF in the HA module allowing an unauthenticated attacker to scan for open ports.
- Product
- Mbconnect24
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Feb 16, 2021An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2.CVE-2020-35558 · Other software · Mbconnectline · reported by MITREHigh 7.5
An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2. There is an SSRF in the in the MySQL access check, allowing an attacker to scan for open ports and gain some information about possible credentials.
- Product
- Mbconnect24
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Feb 16, 2021An issue in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 allows a logged in user to see dCVE-2020-35557 · Other software · Mbconnectline · reported by MITREMedium 6.5
An issue in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 allows a logged in user to see devices in the account he should not have access to due to improper use of access validation.
- Product
- Mbconnect24
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Feb 5, 2021Helm is open-source software which is essentially "The Kubernetes Package Manager".CVE-2021-21303 · Other software · helm · reported by GitHubMedium 5.9
Helm is open-source software which is essentially "The Kubernetes Package Manager". Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. In Helm from version 3.0 and before version 3.5.2, there a few cases where data loaded from potentially untrusted sources was not properly sanitized. When a SemVer in the `version` field of a chart is invalid, in some cases Helm allows the string to be used "as is" without sanitizing. Helm fails to properly sanitized some fields present on Helm repository `index.yaml` files. Helm does not properly sanitized some fields in the `plugin.yaml` file for plugins In some cases, Helm does not properly sanitize the fields in the `Chart.yaml` file. By exploiting these attack vectors, core maintainers were able to send deceptive information to a terminal screen running the `helm` command, as well as obscure or alter information on the screen. In some cases, we could send codes that terminals used to execute higher-order logic, like clearing a terminal screen. Further, during evaluation, the Helm maintainers discovered a few other fields that were not properly sanitized when read out of repository index files. This f
- Product
- helm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 17, 2020In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one always used.CVE-2020-15187 · Other software · helm · reported by GitHubLow 3
In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one always used. If a plugin is compromised, this lowers the level of access that an attacker needs to modify a plugin's install hooks, causing a local execution attack. To perform this attack, an attacker must have write access to the git repository or plugin archive (.tgz) while being downloaded (which can occur during a MITM attack on a non-SSL connection). This issue has been patched in Helm 2.16.11 and Helm 3.3.2. As a possible workaround make sure to install plugins using a secure connection protocol like SSL.
- Product
- helm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 17, 2020In Helm before versions 2.16.11 and 3.3.2 plugin names are not sanitized properly.CVE-2020-15186 · Other software · helm · reported by GitHubLow 3.4
In Helm before versions 2.16.11 and 3.3.2 plugin names are not sanitized properly. As a result, a malicious plugin author could use characters in a plugin name that would result in unexpected behavior, such as duplicating the name of another plugin or spoofing the output to `helm --help`. This issue has been patched in Helm 3.3.2. A possible workaround is to not install untrusted Helm plugins. Examine the `name` field in the `plugin.yaml` file for a plugin, looking for characters outside of the [a-zA-Z0-9._-] range.
- Product
- helm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 17, 2020In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one always used.CVE-2020-15185 · Other software · helm · reported by GitHubLow 2.2
In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one always used. If a repository is compromised, this lowers the level of access that an attacker needs to inject a bad chart into a repository. To perform this attack, an attacker must have write access to the index file (which can occur during a MITM attack on a non-SSL connection). This issue has been patched in Helm 3.3.2 and 2.16.11. A possible workaround is to manually review the index file in the Helm repository cache before installing software.
- Product
- helm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 17, 2020In Helm before versions 2.16.11 and 3.3.2 there is a bug in which the `alias` field on a `Chart.yaml` is not properly sanitized.CVE-2020-15184 · Other software · helm · reported by GitHubLow 3.7
In Helm before versions 2.16.11 and 3.3.2 there is a bug in which the `alias` field on a `Chart.yaml` is not properly sanitized. This could lead to the injection of unwanted information into a chart. This issue has been patched in Helm 3.3.2 and 2.16.11. A possible workaround is to manually review the `dependencies` field of any untrusted chart, verifying that the `alias` field is either not used, or (if used) does not contain newlines or path characters.
- Product
- helm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 22, 2020In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open poCVE-2020-4062 · Other software · CyberArk · reported by GitHubHigh 8.7
In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's privileges to assume full control. A malicious actor who knows the IP address and port number of the Postgres database and has access into the Kubernetes cluster where Conjur runs can gain full read & write access to the Postgres database. This enables the attacker to write a policy that allows full access to retrieve any secret. This Helm chart is a method to install Conjur OSS into a Kubernetes environment. Hence, the systems impacted are only Conjur OSS systems that were deployed using this chart. Other deployments including Docker and the CyberArk Dynamic Access Provider (DAP) are not affected. To remediate this vulnerability, clone the latest Helm Chart and follow the upgrade instructions. If you are not able to fully remediate this vulnerability immediately, you can mitigate some of the risk by making sure Conjur OSS is deployed on an isolated Kubernetes cluster or namespace. The term "isola
- Product
- Conjur OSS Helm Chart
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 19, 2020In Octopus Deploy 2018.8.0 through 2019.x before 2019.12.2, an authenticated user with could trigger a deployment that leaks the Helm Chart repository password.CVE-2020-14470 · Other software · Octopus · reported by MITREMedium 6.5
In Octopus Deploy 2018.8.0 through 2019.x before 2019.12.2, an authenticated user with could trigger a deployment that leaks the Helm Chart repository password.
- Product
- Octopus Deploy
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 16, 2020In Helm greater than or equal to 3.0.0 and less than 3.2.4, a path traversal attack is possible when installing Helm plugins from a tar archive over HTTP.CVE-2020-4053 · Other software · The Helm Project · reported by GitHubLow 3.7
In Helm greater than or equal to 3.0.0 and less than 3.2.4, a path traversal attack is possible when installing Helm plugins from a tar archive over HTTP. It is possible for a malicious plugin author to inject a relative path into a plugin archive, and copy a file outside of the intended directory. This has been fixed in 3.2.4.
- Product
- Helm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 24, 2020Their is an information disclosure vulnerability in Helm from version 3.1.0 and before version 3.2.0.CVE-2020-11013 · Other software · helm · reported by GitHubHigh 8.5
Their is an information disclosure vulnerability in Helm from version 3.1.0 and before version 3.2.0. `lookup` is a Helm template function introduced in Helm v3. It is able to lookup resources in the cluster to check for the existence of specific resources and get details about them. This can be used as part of the process to render templates. The documented behavior of `helm template` states that it does not attach to a remote cluster. However, a the recently added `lookup` template function circumvents this restriction and connects to the cluster even during `helm template` and `helm install|update|delete|rollback --dry-run`. The user is not notified of this behavior. Running `helm template` should not make calls to a cluster. This is different from `install`, which is presumed to have access to a cluster in order to load resources into Kubernetes. Helm 2 is unaffected by this vulnerability. A malicious chart author could inject a `lookup` into a chart that, when rendered through `helm template`, performs unannounced lookups against the cluster a user's `KUBECONFIG` file points to. This information can then be disclosed via the output of `helm template`. This issue has been fixed
- Product
- Helm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 12, 2019In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart tCVE-2019-18658 · Other software · Helm · reported by MITRECritical 9.8
In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service (DoS) via a special file such as /dev/urandom, via symlinks. No version of Tiller is known to be impacted. This is a client-only issue.
- Product
- Helm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 17, 2019helm Before 2.7.2 is affected by: CWE-295: Improper Certificate Validation.CVE-2019-1010275 · Other software · helm · reported by josh@bress.netCritical 9.8
helm Before 2.7.2 is affected by: CWE-295: Improper Certificate Validation. The impact is: Unauthorized clients could connect to the server because self-signed client certs were aloowed. The component is: helm (many files updated, see https://github.com/helm/helm/pull/3152/files/1096813bf9a425e2aa4ac755b6c991b626dfab50). The attack vector is: A malicious client could connect to the server over the network. The fixed version is: 2.7.2.
- Product
- helm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 4, 2019Helm ChartMuseum version >=0.1.0 and < 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CVE-2019-1000009 · Other software · Helm · reported by MITREMedium 6.5
Helm ChartMuseum version >=0.1.0 and < 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack appears to be exploitable via A POST request to the HTTP API can save a chart archive outside of the intended directory. If authentication is, optionally, enabled this requires an authorized user to do so. This vulnerability appears to have been fixed in 0.8.1.
- Product
- Chartmuseum
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.