CVE-2024-53349

—

CVSS 3.1

7.4 high

EPSS

<1%p31

Published

Mar 21, 2025 (Mar 21, 2025)

Modified

Jun 17, 2026

Description

Insecure permissions in kuadrant v0.11.3 allow attackers to gain access to the service account's token, leading to escalation of privileges via the secretes component in the k8s cluster

Vendors: linuxfoundation
Products: kuadrant
Weakness: CWE-269
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.