CyberRota Analysis
AI-GeneratedKyverno versions prior to 1.18.0 are vulnerable to a server-side request forgery (SSRF) flaw that allows authenticated users to manipulate HTTP requests by injecting user-controlled input. This vulnerability can be exploited to access internal services and cloud metadata, potentially leading to data exfiltration through reflected error messages. Organizations using Kyverno should prioritize patching this vulnerability to mitigate the risk of unauthorized access and data leakage.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Kyverno before 1.18.0 contains a server-side request forgery vulnerability in apiCall.service.url that allows authenticated users to send arbitrary HTTP requests by injecting user-controlled input through variable substitution. Attackers can target internal services, cloud metadata endpoints, and loopback addresses, with response data reflected in admission error messages enabling non-blind data exfiltration.