AZL-53528 CVE-2024-10220 affecting package kubernetes for versions less than 1.30.3-1

🗓️ 22 Nov 2024 17:15:06Reported by GoogleType

osv🔗 osv.dev👁 1 Views

AZL-53528 CVE-2024-10220: kubelet arbitrary command execution via crafted gitRepo volumes in Kubernetes below 1.30.3-1.

Reporter	Title	Published	Views	Family All 65
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Kubernetes kubelet (CVE-2024-10220)	28 Mar 202522:00	–	ibm
Tenable Nessus	Azure Linux 3.0 Security Update: kubernetes (CVE-2024-10220)	10 Feb 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: kubernetes (CVE-2024-10220)	16 Jan 202500:00	–	nessus
Tenable Nessus	Photon OS 4.0: Kubernetes PHSA-2025-4.0-0769	20 Mar 202500:00	–	nessus
Tenable Nessus	Photon OS 5.0: Kubernetes PHSA-2025-5.0-0487	21 Mar 202500:00	–	nessus
Tenable Nessus	TencentOS Server 4: kubernetes (TSSA-2024:1093)	16 Jun 202500:00	–	nessus
Tenable Nessus	Unity Linux 20.1050e / 20.1070e Security Update: kubernetes (UTSA-2026-017390)	9 May 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2024-10220	5 Mar 202500:00	–	nessus
CBLMariner	CVE-2024-10220 affecting package kubernetes for versions less than 1.30.3-1	19 Dec 202400:10	–	cbl_mariner

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-10220

21 Apr 2026 04:35Current

7.5High risk

Vulners AI Score7.5

CVSS 3.18.1

EPSS0.39569

SSVC