SSRF vulnerability can be exploited when a hijacked aggregated api server such as metrics-server returns 30X

Posted on December 11, 2022by bugbounty

Kubernetes disclosed a bug submitted by weinongw: https://hackerone.com/reports/1544133 – Bounty: $1000