http:// → blocked
hTtp:// → private IP access
Berenice Flores found two vulnerabilities in Zilliz Attu 2.6.5 that could be chained to reach internal services and, in a tested AWS EKS deployment, compromise the Kubernetes namespace.
Upgrade to 3.0.0.
bfx.social/4y26gdu
