CVE-2021-25748

score

<0.1

cvss

7.6

epss

0.7%

published

2023-05-24

kev added

—

first seen

2026-10-21

ingress-nginx contains a bypass vulnerability caused by newline characters in ingress rules paths in the networking.k8s.io or extensions API group, letting malicious users obtain ingress controller credentials, exploit requires user to be able to create or update ingress objects.