Vulnerability GO-2025-3698
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 year ago
May 23, 2025 at 03:17 PM UTC
Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener
v0.32.0 - v1.116.3
v0.32.0 - v1.116.3
Summary
Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener
Details
Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
7 hours ago
Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener
v0.32.0 - v1.152.0 GO-2026-6568
v0.32.0 - v1.152.0 GO-2026-6568
Medium Risk
9 days ago
Gardener: Authorization Bypass via Group Subject Injection
v0.32.0 - v1.142.5 GHSA-gfjv-gqf2-c888
v0.32.0 - v1.142.5 GHSA-gfjv-gqf2-c888
Unknown
1 year ago
Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener
v0.32.0 - v1.116.3 GO-2025-3696
v0.32.0 - v1.116.3 GO-2025-3696
Critical
1 year ago
Gardener allows metadata injection for a project secret which can lead to privilege escalation
v0.32.0 - v1.116.3 and v1.117.0 - v1.117.4 and v1.118.0 - v1.118.1 GHSA-9x73-87fh-54w9
v0.32.0 - v1.116.3 and v1.117.0 - v1.117.4 and v1.118.0 - v1.118.1 GHSA-9x73-87fh-54w9
Critical
1 year ago
Gardener allows bypassing project secret validation which can lead to privilege escalation
v0.32.0 - v1.116.3 and v1.117.0 - v1.117.4 and v1.118.0 - v1.118.1 GHSA-3hw7-qj9h-r835
v0.32.0 - v1.116.3 and v1.117.0 - v1.117.4 and v1.118.0 - v1.118.1 GHSA-3hw7-qj9h-r835
Impacted packages
Timeline
Published
1 year ago
May 23, 2025 at 03:17 PM UTC
Last Modified
7 months ago
March 03, 2026 at 04:56 AM UTC