An improper file permissions vulnerability affects Kata Containers prior to 1.11.5. When using a Kubernetes hostPath volume and mounting either a file or directory into a container as readonly, the file/directory is mounted as readOnly inside the container, but is still writable inside the guest. For a container breakout situation, a malicious guest can potentially modify or delete files/directories expected to be read-only.
Related Articles
All Mix →How to replace a string with sed in current and recursive subdirectories
The power to update multiple files with a single command in your terminal. Meet your new friend sed. This amazingly powerful CLI tool lives is…
Closing the Loop: Practical Attacks and Defences for GraphQL APIs | by Eugene Lim | CSG @ GovTech
GraphQL is a modern query language for Application Programming Interfaces (APIs). Supported by Facebook and the GraphQL Foundation, GraphQL grew quickly and has entered the…
The Stony Path of Android 🤖 Bug Bounty – Bypassing Certificate Pinning
Table of Contents Why Certificate Pinning? The Setup – Part 1 Installing the Burp Certificate The Setup – Part 2 Configuring Burpsuite The Setup –…
Making sandwiches with closures in JavaScript
An explanation of closures and how they can emulate private methods in JavaScript. Say you’re having a little coding get-together, and you need some sandwiches.…
Hack The Army Results Are In
Table of Contents Background of Hack The Army The Overall Results A Story of One of The Best Bugs Superior Bug Bounty Hunters The Next…
GraphQL Week on the Hacker101 CTF Challenges
What do Netflix, Intuit, Facebook, PayPal, and HackerOne all have in common? All these companies, and many others, have adopted the GraphQL API query language.…

