-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
GoGo| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/coredns/coredns | go | <= 1.9.3 |
Miggo AIRoot Cause AnalysisThe vulnerability involves improper DNS resolution for Kubernetes service FQDNs. CoreDNS's Kubernetes plugin (plugin/kubernetes) is responsible for handling these queries. The ServeDNS() function processes DNS requests and generates responses. The lack of proper validation() in this function could allow external or maliciously crafted DNS entries to hijack the abbreviated 'svc' domain resolution, bypassing cluster-local restrictions. This aligns with the CWE-923 description and the vulnerability's impact on internal service communication.
Ongoing coverage of React2Shell