-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIOngoing coverage of React2Shell
Miggo AIRoot Cause AnalysisThe vulnerability stems from the loop handling service.Status.LoadBalancer.Ingress in newServiceInfo(). The pre-patch code (line 413) appended ingress IPs without validation, allowing empty/invalid IPs to create HNS policies. The fix added a net.ParseIP check to filter invalid IPs. This function's failure to validate() ingress IPs directly enabled the unintended forwarding behavior described in CVE-2021-25736.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| k8s.io/kubernetes | go | < 1.21 | 1.21 |
GoGo