onyx --cves cve-2018-1002103
CVE-2018-1002103
- score
- <0.1
- cvss
- 8.1
- epss
- 0.7%
- published
- 2018-12-05
- kev added
- —
- first seen
Minikube versions 0.3.0-0.29.0 contain an insecure dashboard exposure caused by the dashboard listening on the VM IP at port 30000, letting attackers with predictable IPs use DNS rebinding to create deployments or access host filesystem, exploit requires attacker to control DNS or network environment.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx