GO-2024-2750 Kubernetes Secrets Store CSI Driver plugins arbitrary file write in github.com/Azure/secrets-store-csi-driver-provider-azure

🗓️ 05 Jun 2024 15:10:52Reported by GoogleType

osv🔗 osv.dev👁 9 Views

Kubernetes Secrets Store CSI Driver plugins arbitrary file write in github.com/Azure/secrets-store-csi-driver-provider-azure

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2020-8567	21 Jan 202120:28	–	circl
CNNVD	Kubernetes SIGs Secrets-store-csi-driver path traversal vulnerability	21 Jan 202100:00	–	cnnvd
CVE	CVE-2020-8567	21 Jan 202117:09	–	cve
Cvelist	CVE-2020-8567 Kubernetes Secrets Store CSI Driver plugin directory traversals	21 Jan 202117:09	–	cvelist
EUVD	EUVD-2022-2051	3 Oct 202520:07	–	euvd
Github Security Blog	Kubernetes Secrets Store CSI Driver plugins arbitrary file write	24 May 202217:40	–	github
GitLab Advisory Database	Kubernetes Secrets Store CSI Driver plugins arbitrary file write	24 May 202200:00	–	gitlab
GitLab Advisory Database	Kubernetes Secrets Store CSI Driver plugins arbitrary file write	24 May 202200:00	–	gitlab
NVD	CVE-2020-8567	21 Jan 202117:15	–	nvd
OSV	GHSA-2V35-WJ4R-RCMV Kubernetes Secrets Store CSI Driver plugins arbitrary file write	24 May 202217:40	–	osv

Source	Link
github	www.github.com/advisories/GHSA-2v35-wj4r-rcmv
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-8567
github	www.github.com/Azure/secrets-store-csi-driver-provider-azure/pull/298
github	www.github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp/pull/74
github	www.github.com/hashicorp/secrets-store-csi-driver-provider-vault/pull/50
github	www.github.com/kubernetes-sigs/secrets-store-csi-driver/issues/384
groups	www.groups.google.com/g/kubernetes-secrets-store-csi-driver/c/BI2qisiNXHY

03 Mar 2026 04:55Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24

CVSS 3.14.9 - 6.5

EPSS0.0137