CVE-2025-24513 – Kubernetes Ingress-Nginx Directory Traversal Vulnerability

The following table lists the changes that have been made to the
CVE-2025-24513 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Mar. 25, 2025

    Action Type Old Value New Value
    Added Description A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided data are included in a filename by the ingress-nginx Admission Controller feature, resulting in directory traversal within the container. This could result in denial of service, or when combined with other vulnerabilities, limited disclosure of Secret objects from the cluster.
    Added CVSS V3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
    Added CWE CWE-20
    Added Reference https://github.com/kubernetes/kubernetes/issues/131005
Share the Post:

Related Posts