CVE-2025-62878

CVE-2025-62878: 本地路径供应器路径遍历漏洞 概述 项目| 值 ---|--- CVE ID| CVE-2025-62878 GHSA ID| GHSA-jr3w-9vfr-c746 严重性| 严重 CVSS 10.0 CWE| CWE-23 相对路径遍历 受影响组件| rancher/local-path-provisioner 受影响版本| v0.0.27 v0.0.32 已修复版本| v0.0.33+ 漏洞描述 StorageClass 的 pathPattern 参数存在路径遍历漏洞。恶意用户可以通过使用相对路径元素（例如 ../）来操纵...

K000161495: Rancher Local Path Provisioner vulnerability CVE-2025-62878

Security Advisory Description A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories. CVE-2025-62878 Impact There is no impact; F5 products...

CVE-2026-22753

Spring Security CVE-2026-22753 affects versions 7.0.0 to 7.0.4 where using securityMatchers(String) together with a PathPatternRequestMatcher.Builder bean to prepend a servlet path can cause requests to fail matching against the filter chain, potentially rendering authentication, authorization, a...

CVE-2025-62878 Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern

A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories...

GO-2026-4425 Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern in github.com/rancher/local-path-provisioner

Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern in github.com/rancher/local-path-provisioner...

GHSA-JR3W-9VFR-C746 Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern

Impact A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories. Example: apiVersion: storage.k8s.io/v1 kind: StorageClass metadata:...