Read the docs

Kubernetes

Records127All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high49CVSS 7.0–8.9

Exploited now

Kubernetes records in CISA KEV

No Kubernetes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Kubernetes 56 records HIGH Cri-o 10 records HIGH Ingress-nginx 9 records HIGH Minikube 3 records MEDIUM Java 2 records MEDIUM Nginx Ingress Controller 2 records MEDIUM Apiserver 1 record MEDIUM Aws-iam-authenticator 1 record MEDIUM

Records

2 records in Java · all components

TI-2020-06868 CVE-2020-8570 · GHSA-cghx-9gcr-r42x

Kubernetes Java client libraries unvalidated path traversal in Copy implementation

Priority MEDIUM 46

Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archiv…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03688 Published 2021-01-21 Fixed in 9.0.2, 10.0.1 CWE-23
TI-2021-07830 CVE-2021-25738 · GHSA-m8wh-mqgf-rr8g

Code exec via yaml parsing

Priority LOW 30

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00473 Published 2021-10-11 Fixed in 11.0.1 CWE-20
Open these records in search →