"Self" DOS with large deployment and scaling
该报告还没有中文解读。
原文摘录
摘自原文(4310 字符中的一小部分)
Summary: Good day! I was just messing around with some functions and trying to see what the impact was on my cluster. I found out that it took quite some resources to process a larger deployment, especially when scaling it. When I check your security release process I noticed that it did include …
原文中的代码
{
"kind": "Scale",
"apiVersion": "autoscaling/v1",
"metadata": {
"name": "nginx",
"namespace": "default"
},
"spec": {
"replicas": 999
}
} 默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Kubernetes 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @wiardvanrij · 版权归作者与 Kubernetes 所有