Skip to content
Threat Feed

Tag

Fission

1 brief RSS
critical advisory

Fission Function Invocation Bypass via Public Router Endpoint

The Fission router exposes the `/fission-function/<ns>/<name>` endpoint on its public listener, allowing invocation of any function without an HTTPTrigger, leading to unauthorized function access and potential cross-tenant exploitation; patched in v1.23.0.

fission function-invocation bypass kubernetes
1r 1t