Fake email from <any_name>@kubernetes.io to any other email

Disclosed: 2020-07-24 00:42:37 By lamscun To kubernetes
None
Vulnerability Details
Hi, I just found an issue No Valid SPF Records in your mail server @kubernetes.io Desciprition : There is a email spoofing vulnerability.Email spoofing is the forgery of an email header so that the message appears to have originated from someone or somewhere other than the actual source. Email spoofing is a tactic used in phishing and spam campaigns because people are more likely to open an email when they think it has been sent by a legitimate source. The goal of email spoofing is to get recipients to open, and possibly even respond to, a solicitation. {F898620} ## Impact An attacker would send a Fake email (from <any_name>@kubernetes.io to any other email). The results can be more dangerous.
Actions
View on HackerOne
Report Stats
  • Report ID: 918243
  • State: Closed
  • Substate: duplicate
  • Upvotes: 3
Share this report