2 lines
2.1 KiB
JSON
2 lines
2.1 KiB
JSON
{"affected":[{"affectedData":[{"product":"Kyverno","vendor":"Kyverno","versions":[{"status":"affected","version":"1.16.0"}]}],"source":"cret@cert.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:kyverno:kyverno:*:*:*:*:*:*:*:*","matchCriteriaId":"F2E0715F-61DE-45F5-840E-06CF5C468D33","versionEndIncluding":"1.17.1","versionStartIncluding":"1.16.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions."},{"lang":"es","value":"Kyverno, versiones 1.16.0 y posteriores, son vulnerables a SSRF debido a funciones HTTP CEL sin restricciones."}],"id":"CVE-2026-4789","lastModified":"2026-06-17T10:57:13.363","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-4789","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-04-01T18:43:09.447511Z","version":"2.0.3"}}]},"published":"2026-03-30T21:17:10.843","references":[{"source":"cret@cert.org","tags":["Product"],"url":"https://github.com/kyverno/kyverno"},{"source":"cret@cert.org","tags":["Third Party Advisory"],"url":"https://kb.cert.org/vuls/id/655822"},{"source":"cret@cert.org","tags":["Technical Description"],"url":"https://portswigger.net/web-security/ssrf"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.kb.cert.org/vuls/id/655822"}],"sourceIdentifier":"cret@cert.org","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-918"}],"source":"nvd@nist.gov","type":"Primary"}]}
|