MARIN3R is a lightweight, CRD based envoy control plane for kubernetes. In versions 0.13.3 and below, there is a cross-namespace secret access vulnerability in the project's DiscoveryServiceCertificate which allows users to bypass RBAC and access secrets in unauthorized namespaces. This issue is fixed in version 0.13.4.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| github.com/3scale-sre/marin3r(Go) | 0 | 0.13.4 | N/A |
CVSS Metrics
