3 matches found
GHSA-WP3J-XQ48-XPJW podman kube play symlink traversal vulnerability
Impact The podman kube play command can overwrite host files when the kube file contains a ConfigMap or Secret volume mount and the volume already contains a symlink to a host file. This allows a malicious container to write to arbitrary files on the host BUT the attacker only controls the target...
8.1CVSS6.7AI score0.0108EPSS
SaveExploits0References34
podman kube play symlink traversal vulnerability
Impact The podman kube play command can overwrite host files when the kube file contains a ConfigMap or Secret volume mount and the volume already contains a symlink to a host file. This allows a malicious container to write to arbitrary files on the host BUT the attacker only controls the target...
8.1CVSS6.7AI score0.0108EPSS
SaveExploits0References34Affected Software2
20