Orca Research Pod discovered two bugs in kro that could allow an attacker to introduce a malicious CustomResourceDefinition (CRD). Kro is an open-source project enabling custom Kubernetes APIs using ResourceGraphDefinition resources. These vulnerabilities could lead to a confused deputy scenario where unauthorized actions are performed.
Give a Pawfive to this post!
Share with your friends and followers
Start writing about what excites you in tech — connect with developers, grow your voice, and get rewarded.
Join other developers and claim your FAUN.dev() account now!
