Database/Container, Kubernetes & orchestration
Helm: The `lookup` template function discloses in-cluster resources, including Secrets, to a chart author
CVE-2020-11013Container, Kubernetes & orchestrationcurated
Impact
The lookup template function discloses in-cluster resources, including Secrets, to a chart author
Who can reach it
Anyone who can get an operator to install their chart
What to do
Upgrade Helm; review third-party charts before install
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.