github.com/rancher/fleet vulnerabilities (Go)
7 vulnerabilities.
-
github.com/rancher/fleetGo Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer 9.9 Critical -
github.com/rancher/fleetGo Rancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml 5.0 Medium -
github.com/rancher/fleetGo SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components 8.3 High -
github.com/rancher/fleetGo Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent 8.8 High -
github.com/rancher/fleetGo Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering 9.9 Critical -
github.com/rancher/fleetGo Rancher Fleet Helm Values are stored inside BundleDeployment in plain text 7.7 High -
github.com/rancher/fleetGo Fleet doesn’t validate a server’s certificate when connecting through SSH 6.3 Medium