张晋涛的 TIL
🚨🚨🚨昨晚在 Kubernetes ingress-nginx 披露了一系列漏洞，最高评级 9.8 分的高危漏洞。我们的最新版本已经完成了漏洞修复，请尽快升级到最新版本。 ​ ​CVE-2025-24514 – auth-url Annotation Injection CVE-2025-1097 – auth-tls-match-cn Annotation Injection CVE-2025-1098 – mirror UID Injection CVE-2025-1974 – NGINX Configuration…
https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities
wiz.io
CVE-2025-1974: The IngressNightmare in Kubernetes | Wiz Blog
CVE-2025-1974: The IngressNightmare in Kubernetes | Wiz Blog
Wiz Research uncovered RCE vulnerabilities (CVE-2025-1097, 1098, 24514, 1974) in Ingress NGINX for Kubernetes allowing cluster-wide secret access.