Lucene search

CVE-2021-20218

🗓️ 16 Mar 2021 21:10:15Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 111 Views

Fabric8 Kubernetes-client v4.2.0 and later allows file extraction outside working pat

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 20
Cvelist	CVE-2021-20218	16 Mar 202121:00	–	cvelist
OSV	GHSA-JWH2-FFG4-48XC Improper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client	24 May 202217:44	–	osv
OSV	CVE-2021-20218	16 Mar 202121:15	–	osv
OSV	RHSA-2021:1006 Red Hat Security Advisory: OpenShift Container Platform 4.7.5 security and bug fix update	18 Sep 202404:16	–	osv
NVD	CVE-2021-20218	16 Mar 202121:15	–	nvd
Prion	Design/Logic Flaw	16 Mar 202121:15	–	prion
Veracode	Directory Traversal	4 Feb 202103:44	–	veracode
Github Security Blog	Improper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client	24 May 202217:44	–	github
RedhatCVE	CVE-2021-20218	2 Feb 202111:37	–	redhatcve
RedHat Linux	(RHSA-2021:1006) Moderate: OpenShift Container Platform 4.7.5 security and bug fix update	5 Apr 202112:52	–	redhat

Nvd

Vulners

Node

redhat kubernetes-clientRange4.2.0–4.7.2

redhat kubernetes-clientRange4.8.0–4.11.2

redhat kubernetes-clientRange4.12.0–4.13.2

redhat kubernetes-clientRange5.0.0–5.0.2

Node

redhat a-mq_onlineMatch-

redhat build_of_quarkusMatch-

redhat codeready_studioMatch12.0

redhat descision_managerMatch7.0

redhat integration_camel_kMatch-

redhat jboss_fuseMatch7.0.0

redhat openshift_container_platformMatch3.11

redhat process_automationMatch7.0

[
  {
    "product": "fabric8-kubernetes-client",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "kubernetes-client-4.2.0 and after"
      }
    ]
  }
]

Source	Link
github	www.github.com/fabric8io/kubernetes-client/issues/2715
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Mar 2021 21:15Current

7.2High risk

Vulners AI Score7.2

CVSS25.8

CVSS37.4

EPSS0.00583

CWE-22