GO-2022-0908

vendorUSosv

Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

view advisory published 2024-08-21Licence: per source

Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-25737USmedium4.8—
A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs i…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan