Code injection in Kubernetes Java Client

2021-10-1217:50:25

Google

osv.dev

0.0004 Low

EPSS

Percentile

15.9%

JSON

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.

CPENameOperatorVersion
io.kubernetes:client-javaeq8.0.0
io.kubernetes:client-javaeq4.0.0-beta1
io.kubernetes:client-javaeq3.0.0
io.kubernetes:client-javaeq8.0.0-alpha1
io.kubernetes:client-javaeq10.0.2
io.kubernetes:client-javaeq1.0.0-beta3
io.kubernetes:client-javaeq7.0.0
io.kubernetes:client-javaeq0.1
io.kubernetes:client-javaeq1.0.0-beta2
io.kubernetes:client-javaeq6.0.1

Name	Operator	Version
io.kubernetes:client-java	eq	8.0.0
io.kubernetes:client-java	eq	4.0.0-beta1
io.kubernetes:client-java	eq	3.0.0
io.kubernetes:client-java	eq	8.0.0-alpha1
io.kubernetes:client-java	eq	10.0.2
io.kubernetes:client-java	eq	1.0.0-beta3
io.kubernetes:client-java	eq	7.0.0
io.kubernetes:client-java	eq	0.1
io.kubernetes:client-java	eq	1.0.0-beta2
io.kubernetes:client-java	eq	6.0.1