FINDING A COMMAND INJECTION VULNERABILITY IN KUBERNETES

Summary from the TLDR InfoSec newsletter

Akamai details the newly released CVE-2023-3676 which is a command injection vulnerability in Kubernetes on Windows hosts. This article details the vulnerability and provides a proof-of-concept YAML file, a method to check if you’re vulnerable, and an OPA rule to block the vulnerability.