Vulnerabilities (CVE)

Filtered by vendor Kyma-project Subscribe
Filtered by product Kyma
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-38182 1 Kyma-project 1 Kyma 2024-02-04 6.5 MEDIUM 8.8 HIGH
Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster.
CVE-2021-33708 1 Kyma-project 1 Kyma 2024-02-04 6.5 MEDIUM 8.8 HIGH
Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges.