Posted by Andrea Cosentino on Oct 09 Severity: CVSS 3.1: 8.8 (high) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected versions: - Apache Camel Karavan 4.0.0 before 4.22.1 Description: Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's `kubernetes.yaml` and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod...

Read the full article at oss-security →