CVE-2023-5044

HIGH 8.8EPSS 56.6%

Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.

CVSS v4.0: 7.2 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 7.6 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
CVSS v3.1: 7.6 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
EPSS: 56.61% chance of exploitation in the next 30 days, 99th percentile
Published: 2023-10-25
Updated: 2025-06-12

Proof-of-concept exploits (4)

4ARMED/cve-2023-50442★ · 2024-01-29
KubernetesBachelor/CVE-2023-50440★ · 2025-05-27
cloud-Xolt/CVE0★ · 2023-11-30
r0binak/CVE-2023-50444★ · 2023-12-30

References

Related