CVE-2018-1002104: Kubernetes Nginx Ingress Controller

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Versions < 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly.

Affected products

• Kubernetes Nginx Ingress Controller: before 1.5.0 (fixed in 1.5.0)

Published 2020-01-14. Last modified 2026-06-17.