Headline
GHSA-h828-v5pv-33qx: coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints
A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domains (TLD) to a pod they control by creating projects and namespaces that match the TLD.
- GitHub Advisory Database
- GitHub Reviewed
- CVE-2022-2837
coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints
Moderate severity GitHub Reviewed Published Mar 3, 2023 to the GitHub Advisory Database • Updated Mar 6, 2023
Package
gomod github.com/coredns/coredns (Go)
Affected versions
<= 1.9.3
Published by the National Vulnerability Database
Mar 3, 2023
Published to the GitHub Advisory Database
Mar 3, 2023
Related news
A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domains (TLD) to a pod they control by creating projects and namespaces that match the TLD.