PT-2025-12716 · Unknown+1 · Ingress-Nginx+1

Nir Ohfeld + 1 · Published 2025-03-23 · Updated 2025-04-17 · CVE-2025-24513

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions ingress-nginx versions prior to v1.12.1 ingress-nginx versions before v1.11.5 ingress-nginx versions from v1.12.0-beta.0 before v1.12.1

Description A security issue was discovered in ingress-nginx where attacker-provided data are included in a filename by the ingress-nginx Admission Controller feature, resulting in directory traversal within the container. This could result in denial of service, or when combined with other vulnerabilities, limited disclosure of Secret objects from the cluster. The issue affects over 6,500 clusters and could lead to unauthenticated remote code execution (RCE) or secret theft.

Recommendations For versions prior to v1.12.1, update to v1.12.1 or later to fix the vulnerability. For versions before v1.11.5, update to v1.11.5 or later to fix the vulnerability. For versions from v1.12.0-beta.0 before v1.12.1, update to v1.12.1 or later to fix the vulnerability. As a temporary workaround, consider restricting admission controller access until a patch is available.

Fix

DoS

RCE

Path traversal

Weakness Enumeration

CWE-22

CWE-20

Related Identifiers

BDU:2025-05134

BIT-NGINX-INGRESS-CONTROLLER-2025-24513

CVE-2025-24513

GHSA-242M-6H72-7HGP

GO-2025-3564

OPENSUSE-SU-2025:14937-1

Affected Products

Red Os

Ingress-Nginx

References · 85

• https://bdu.fstec.ru/vul/2025-05134 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-24513 · Security Note
• https://osv.dev/vulnerability/BIT-nginx-ingress-controller-2025-24513 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-242m-6h72-7hgp · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:14937-1 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3564 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-24513 · Vendor Advisory
• https://github.com/kubernetes/kubernetes/issues/131005 · Note
• https://github.com/kubernetes/ingress-nginx · Note
• https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.11.5 · Note
• https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.12.1 · Note
• https://twitter.com/d0tslash/status/1904903170528026914 · Twitter Post
• https://suse.com/security/cve/CVE-2025-27612 · Note
• https://twitter.com/armosec/status/1904271226295431210 · Twitter Post