GHSA-fcrp-7gc2-93g7
Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/envoyproxy/gateway | >= 1.8.0-rc.0, < 1.8.1 | 1.8.1 |
| Go | github.com/envoyproxy/gateway | < 1.7.4 | 1.7.4 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
Envoy Gateway accepts extension-managed custom backendRefs from an HTTPRoute to a backend resource in another namespace without requiring a matching Gateway API ReferenceGrant in the target namespace. This breaks the Gateway API cross-namespace consent model: the namespace that owns the referenced backend resource does not need to opt in with a ReferenceGrant before another namespace’s HTTPRoute can use that resource.
### Patches
[1.7.4](https://github.com/envoyproxy/gateway/releases/tag/v1.7.4)
[1.8.1](https://github.com/envoyproxy/gateway/releases/tag/v1.8.1)
References
External links from the advisory. They lead to third-party sites.