21 matches found
Jenkins Enterprise and Operations Center 2.303.x < 2.303.30.0.16 / 2.346.4.1 Multiple Vulnerabilities (CloudBees Security Advisory 2022-08-27)
The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.303.x prior to 2.303.30.0.16, or 2.x prior to 2.346.4.1. It is, therefore, affected by multiple vulnerabilities, including the following: - Loading specially-crafted yaml with the Kubernetes Java...
RCE vulnerability in Kubernetes Continuous Deploy
Kubernetes Continuous Deploy 2.3.1 and earlier bundles a version of Kubernetes Java Client library with the vulnerability https://vulners.com/cve/CVE-2021-25738CVE-2021-25738 that does not configure its YAML parser to prevent the instantiation of arbitrary types. This results in a remote code...
io.kubernetes:client-java-examples (2.0.0-beta2) potentially affected by CVE-2021-25738 via io.kubernetes:client-java (2.0.0-beta2)
io.kubernetes:client-java MAVEN version 2.0.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - io.kubernetes:client-java-examples 2.0.0-beta2 Source cves: CVE-2021-25738 Source advisory:...
fr.jetoile.hadoop:hadoop-unit-pulsar (>=3.6, <=3.8), fr.jetoile.hadoop:hadoop-unit-pulsar-standalone (>=3.6, <=3.8) +30 more potentially affected by CVE-2021-25738 via io.kubernetes:client-java (2.0.0)
io.kubernetes:client-java MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - fr.jetoile.hadoop:hadoop-unit-pulsar =3.6, =3.6, =2.2.0, =2.2.0, =2.4.0, =2.2.0, =2.2.0, =2.2.0, =2.3.0,...
io.kubernetes:client-java-examples (4.0.0-beta1) potentially affected by CVE-2021-25738 via io.kubernetes:client-java (4.0.0-beta1)
io.kubernetes:client-java MAVEN version 4.0.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - io.kubernetes:client-java-examples 4.0.0-beta1 Source cves: CVE-2021-25738 Source advisory:...
com.bybutter.sisyphus.middleware:sisyphus-grpc-client-kubernetes (>=0.0.4, <=0.0.5), com.cloudimpl:cluster-k8 (2.1.0.9) +13 more potentially affected by CVE-2021-25738 via io.kubernetes:client-java (8.0.2)
io.kubernetes:client-java MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - com.bybutter.sisyphus.middleware:sisyphus-grpc-client-kubernetes =0.0.4, =2.1.0, =2.3.0-beta, =2.1.0, =2.1.0,...
cn.xphsc.boot:kubernetes-spring-boot-starer (1.0.0-rc), com.bybutter.sisyphus.middleware:sisyphus-grpc-client-kubernetes (>=0.0.6-m0, <=0.0.6-m3) +11 more potentially affected by CVE-2021-25738 via io.kubernetes:client-java (9.0.0)
io.kubernetes:client-java MAVEN version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - cn.xphsc.boot:kubernetes-spring-boot-starer 1.0.0-rc -...
co.macrometa.c8streams.handlers:kop (>=2.7.1.5, <=2.7.1.6), com.bybutter.sisyphus.middleware:sisyphus-grpc-client-kubernetes (>=0.0.6, <=0.0.24) +53 more potentially affected by CVE-2021-25738 via io.kubernetes:client-java (9.0.2)
io.kubernetes:client-java MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - co.macrometa.c8streams.handlers:kop =2.7.1.5, =0.0.6, =2.0.0, =0.0.1, =2.6.3.1, =2.6.3.1, =2.6.3.1, =2.6.3.1,...
com.sinkedship.cerberus:cerberus-client-proxy-spring-boot-autoconfigure (0.2.2), com.sinkedship.cerberus:cerberus-client-proxy-spring-boot-starter (0.2.2) +26 more potentially affected by CVE-2021-25738 via io.kubernetes:client-java (10.0.1)
io.kubernetes:client-java MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - com.sinkedship.cerberus:cerberus-client-proxy-spring-boot-autoconfigure 0.2.2 -...
com.squareup.misk:chat (>=0.2.3, <=0.2.5), com.squareup.misk:exemplar (>=0.2.3, <=0.2.5) +4 more potentially affected by CVE-2021-25738 via io.kubernetes:client-java (0.2)
io.kubernetes:client-java MAVEN version 0.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - com.squareup.misk:chat =0.2.3, =0.2.3, =0.2.3, =0.2.3, =0.2.5 - com.squareup.misk:urlshortener 0.2.5 -...
io.kubernetes:client-java-examples (2.0.0-beta1) potentially affected by CVE-2021-25738 via io.kubernetes:client-java (2.0.0-beta1)
io.kubernetes:client-java MAVEN version 2.0.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - io.kubernetes:client-java-examples 2.0.0-beta1 Source cves: CVE-2021-25738 Source advisory:...
club.mydlq:swagger-kubernetes (2.1.0), com.github.javaito:hcjf (>=1.7.0, <=1.10.0) +11 more potentially affected by CVE-2021-25738 via io.kubernetes:client-java (4.0.0)
io.kubernetes:client-java MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - club.mydlq:swagger-kubernetes 2.1.0 - com.github.javaito:hcjf =1.7.0, =6.2.0, =6.6.0, =6.2.0, =6.2.0, =6.6.0,...
com.github.javaito:hcjf (>=1.10.1, <=1.11.5), com.github.shoothzj:sdk-kubectl (>=3.0.10.release, <=3.0.31.release) +18 more potentially affected by CVE-2021-25738 via io.kubernetes:client-java (5.0.0)
io.kubernetes:client-java MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - com.github.javaito:hcjf =1.10.1, =3.0.10.release, =3.0.10.release, =1.0.0, =1.0.0, =0.0.1, =8.17.1, =8.17.1,...
com.github.srujankujmar:controller-service (0.9.6.0.1), com.github.srujankujmar:deployer-services (0.9.6.0.1) +30 more potentially affected by CVE-2021-25738 via io.kubernetes:client-java (7.0.0)
io.kubernetes:client-java MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - com.github.srujankujmar:controller-service 0.9.6.0.1 - com.github.srujankujmar:deployer-services 0.9.6.0.1 -...
io.kubernetes:client-java-cert-manager-models (10.0.2), io.kubernetes:client-java-examples (10.0.2) +4 more potentially affected by CVE-2021-25738 via io.kubernetes:client-java (10.0.2)
io.kubernetes:client-java MAVEN version 10.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.kubernetes:client-java and may be impacted: - io.kubernetes:client-java-cert-manager-models 10.0.2 - io.kubernetes:client-java-examples 10.0.2 -...
CVE-2021-25738
creationtimestamp| type| source ---|---|--- 2021-10-11 22:24:44+00:00| seen| https://t.me/cibsecurity/30361...
CVE-2021-25738
Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution...
CVE-2021-25738
CVE-2021-25738: The vulnerability arises from loading specially crafted YAML via the Kubernetes Java Client library, enabling code execution. Connected documents consistently describe this YAML-loading path as the root cause and code execution outcome. The public data does not provide precise aff...
app.cash.backfila:client-misk (>=0.1.0, <=0.1.4-20221128.2102-bdd85b6), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc, <=0.1.4-20210806.0204-5341f38) +262 more potentially affected by CVE-2021-25738 via io.kubernetes:client-java (>=0.2, <=11.0.0)
io.kubernetes:client-java MAVEN version =0.2, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =0.1.0, =0.1.0, =0.1.4-20220614.0152-5ae0eef, =0.0.2-alpha-1, =0.0.1-alpha, =2.7.1.5, =2.7.1.6 -...
