CVE-2024-53350

Description

Insecure permissions in kubeslice v1.3.1 allow attackers to gain access to the service account's token, leading to escalation of privileges.

Affected Platforms

Weakness Type

CWE-269

References

• https://gist.github.com/HouqiyuA/1cb964206e0d6bebd1c57a124c55fa03
• https://github.com/kubeslice/kubeslice
• https://kubeslice.io/documentation/open-source/1.3.0