CVE-2020-15186

🗓️ 17 Sep 2020 22:12:15Reported by GitHub_MType

Helm versions 2.16.11 and 3.3.2 suffer from improper sanitization of plugin names, allowing for unexpected behavior

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 20
OSV	CVE-2020-15186	17 Sep 202022:15	–	osv
OSV	GHSA-M54R-VRMV-HW33 Improper Sanitizing of plugin names in helm	24 May 202116:57	–	osv
OSV	BIT-HELM-2020-15186 Improper sanitization of plugin names in Helm	6 Mar 202410:54	–	osv
OSV	SUSE-SU-2020:3760-1 Security changes in Kubernetes, etcd, and helm; Bugfix in cri-o package	23 Dec 202008:18	–	osv
Veracode	Command Injection	18 Sep 202002:29	–	veracode
GitLab Advisory Database	Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')	24 May 202100:00	–	gitlab
GitLab Advisory Database	Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')	24 May 202100:00	–	gitlab
GitLab Advisory Database	Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')	24 May 202100:00	–	gitlab
Github Security Blog	Improper Sanitizing of plugin names in helm	24 May 202116:57	–	github
Cvelist	CVE-2020-15186 Improper sanitization of plugin names in Helm	17 Sep 202021:40	–	cvelist

Nvd

Vulners

Node

helm helmRange2.0.0–2.16.11

helm helmRange3.0.0–3.3.2

[
  {
    "product": "helm",
    "vendor": "helm",
    "versions": [
      {
        "status": "affected",
        "version": ">= 2.0.0, < 2.16.11"
      },
      {
        "status": "affected",
        "version": ">= 3.0.0, < 3.3.2"
      }
    ]
  }
]

Source	Link
github	www.github.com/helm/helm/commit/809e2d999e2c33e20e77f6bff30652d79c287542
github	www.github.com/helm/helm/security/advisories/GHSA-m54r-vrmv-hw33

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Sep 2020 22:15Current

3.8Low risk

Vulners AI Score3.8

CVSS24

CVSS32.7 - 3.4

EPSS0.0042