tuladhar/ingress-nightmareIngressNightmare (CVE-2025-1974)
이 Python 스크립트는 Ingress NGINX Controller를 실행 중인지, 그리고 실행 중이라면 알려진 취약한 버전을 사용 중인지 이해하는 데 도움을 줍니다.
먼저 여기에서 uv를 설치한 다음, 감사할 Kubernetes 클러스터에 대해 스크립트를 실행하세요.
uv run --with kubernetes,packaging check.py
Checking for ingress-nginx pods...
ℹ️ It looks like you're using the NGinx ingress controller.
Checking service 'ingress-nginx-controller-admission' in namespace 'ingress-nginx'...
ℹ️ Found related service 'ingress-nginx-controller-admission' of type: ClusterIP
→ ClusterIP: 10.100.127.164
📦 Images used by ingress-nginx controller pods:
- registry.k8s.io/ingress-nginx/controller:v1.12.0@sha256:e6b8de175acda6ca913891f0f727bca4527e797d52688cbe9fec9040d6f6b6fa
🔢 Detected ingress-nginx controller versions:
→ 1.12.0 🛑 LIKELY VULNERABLE
Checking for ingress-nginx pods...
ℹ️ It looks like you're using the NGinx ingress controller.
Checking service 'ingress-nginx-controller-admission' in namespace 'ingress-nginx'...
ℹ️ Found related service 'ingress-nginx-controller-admission' of type: ClusterIP
→ ClusterIP: 10.96.74.187
📦 Images used by ingress-nginx controller pods:
- registry.k8s.io/ingress-nginx/controller:v1.12.1@sha256:d2fbc4ec70d8aa2050dd91a91506e998765e86c96f32cffb56c503c9c34eed5b
🔢 Detected ingress-nginx controller versions:
→ 1.12.1 ✅ Likely safe