Skip to content
Threat Feed
Subscribe

Product

External Secrets Operator (>= 0.10.0, < 1.3.2)

1 brief RSS
high advisory

External Secrets Operator Label Enforcement Bypass Leading to Secret Exfiltration

A vulnerability in the External Secrets Operator enables authenticated users to bypass label enforcement checks in webhook generators, allowing unauthorized exfiltration of Kubernetes secrets to malicious URLs.

External Secrets Operator vulnerability cloud-native k8s
1t 1c