From 23b3940a179e36e885a97ac8750c496e58dc151e Mon Sep 17 00:00:00 2001 From: bauthard <8293321+bauthard@users.noreply.github.com> Date: Thu, 17 Sep 2020 14:20:01 +0530 Subject: [PATCH] Update kubernetes-pods.yaml --- panels/kubernetes-pods.yaml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/panels/kubernetes-pods.yaml b/panels/kubernetes-pods.yaml index 3927829f47..3193757bd8 100644 --- a/panels/kubernetes-pods.yaml +++ b/panels/kubernetes-pods.yaml @@ -1,11 +1,15 @@ id: kubernetes-pods-api + info: name: Kubernetes Pods API author: ilovebinbash severity: critical + description: When the service port is available, anyone can execute commands inside the container. See https://github.com/officialhocc/Kubernetes-Kubelet-RCE for inspiration. + requests: - method: GET path: + - '{{BaseURL}}/pods' - '{{BaseURL}}:10250/pods' matchers-condition: and matchers: @@ -16,4 +20,4 @@ requests: - type: word words: - "application/json" - part: header + part: header \ No newline at end of file