The probability is the direct output of the EPSS model, and conveys an overall sense of the threat of exploitation in the wild. The percentile measures the EPSS probability relative to all known EPSS scores. Note: This data is updated daily, relying on the latest available EPSS model version. Check out the EPSS documentation for more details.
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsLearn about Improper Input Validation vulnerabilities in an interactive lesson.
Start learningUpgrade github.com/kyma-project/kyma/components/apiserver-proxy/internal/proxy
to version 1.24.7 or higher.
github.com/kyma-project/kyma/components/apiserver-proxy/internal/proxy is a core component that uses JWT authentication to secure access to the Kubernetes API server. It is based on the kube-rbac-proxy project. This Helm chart outlines the component's installation.
Affected versions of this package are vulnerable to Improper Input Validation. Authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster.