CVE-2021-25745: Improper Input Validation in k8s.io/ingress-nginx
8.1
Basic Information
Technical Details
Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
---|---|---|---|
k8s.io/ingress-nginx | go | < 1.2.0 | 1.2.0 |
Vulnerability Intelligence
Miggo AI
Root Cause Analysis
The provided vulnerability information describes an improper input validation issue in the spec.rules[].http.paths[].path
field handling, but does not include specific code references, commit diffs, or patch details that would allow identification of exact vulnerable functions. While the vulnerability clearly exists in the path
validation logic of the ingress-nginx
controller's Ingress
resource processing, the technical reports and advisories provided do not contain sufficient implementation details (function names, file paths, or specific validation logic) to confidently identify specific functions. The mitigation suggests adding path
validation rules, but without seeing the actual code changes or maintainer comments linking to specific functions, we cannot reliably map the vulnerability to concrete function implementations.