Approved changes feed: RSS · Atom
cpe:2.3:a:ctfer-io:fullchain:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ctfer Io (bd498e36-499d-5353-a48d-d45e0653aa5e) |
|---|---|
| Product | Fullchain (3e1e2e97-099c-5495-b25d-08cd2c652976) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-32769 |
vulnerable | 2026-06-08 07:57:18.138295 |
Fullchain's Invalid NetworkPolicy enables a malicious actor to pivot into another namespace
Fullchain is an umbrella project for deploying a ready-to-use CTF platform. In versions prior to 0.1.1, due to a mis-written NetworkPolicy, a malicious actor can pivot from a subverted application to any Pod out of the origin namespace. The flawed inter-ns NetworkPolicy breaks the security-by-default property expected as part of the deployment program, leading to a potential lateral movement. This issue has been fixed in version 0.1.1. To workaround, delete the failing network policy that should be prefixed by inter-ns- in the target namespace.
Published: 2026-03-20T00:18:55.991Z
Updated: 2026-03-20T20:01:28.750Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.