Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2023/03/06 6:19 p.m.43 views

CVE-2023-23939 Azure/setup-kubectl: Escalation of privilege vulnerability for v3 and lower

Azure/setup-kubectl is a GitHub Action for installing Kubectl. This vulnerability only impacts versions before version 3. An insecure temporary creation of a file allows other actors on the Actions runner to replace the Kubectl binary created by this action because it is world writable. This...

3.9CVSS7.2AI score0.00362EPSS
SaveExploits0References2
Rows per page
Query Builder