Kubernetes

Records127All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high49CVSS 7.0–8.9

Exploited now

Kubernetes records in CISA KEV

No Kubernetes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kubernetes 56 records HIGH Cri-o 10 records HIGH Ingress-nginx 9 records HIGH Minikube 3 records MEDIUM Java 2 records MEDIUM Nginx Ingress Controller 2 records MEDIUM Apiserver 1 record MEDIUM Aws-iam-authenticator 1 record MEDIUM

Records

1 record in Apiserver · all components

TI-2022-02928 CVE-2022-3172

Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)

MEDIUM 40

A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.02464 Published 2023-11-03 Partial fix · v1.25.1, v1.24.5 +2 CWE-918

Open these records in search →