CVE-2024-36540

No fix known EPSS <1%CVSS 9.8

Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

Published 2024-07-24 · CVE record · OSV

Products: external-secrets