Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
added 2022/05/24 5:44 p.m.43 views

Improper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client copy command to extract files outside the working path. The highest threat from this vulnerability is to integrity and...

7.4CVSS3.8AI score0.01312EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2021/03/16 9:15 p.m.42 views

CVE-2021-20218

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client copy command to extract files outside the working path. The highest threat from this vulnerability is to integrity and...

7.4CVSS0.01312EPSS
SaveExploits0References2
Prion
Prion
added 2021/03/16 9:15 p.m.26 views

Design/Logic Flaw

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client copy command to extract files outside the working path. The highest threat from this vulnerability is to integrity and...

5.8CVSS7.3AI score0.01312EPSS
SaveExploits0References2Affected Software6
ATTACKERKB
ATTACKERKB
added 2021/03/16 9:15 p.m.4 views

CVE-2021-20218

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client copy command to extract files outside the working path. The highest threat from this vulnerability is to integrity and...

7.4CVSS6.4AI score0.01312EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/03/16 12:0 a.m.21 views

Rohan Kumar kubernetes-client 路径遍历漏洞

Rohan Kumar kubernetes-client is an open source application by Rohan Kumar. Provides smooth DSL access to the full Kubernetes and OpenShift REST APIs. A security vulnerability exists in fabric8 kubernetes-client in version 4.2.0 and after, which stems from the copy command lifting files outside o...

7.4CVSS6.6AI score0.01312EPSS
SaveExploits0References13
RedhatCVE
RedhatCVE
added 2021/02/02 11:37 a.m.42 views

CVE-2021-20218

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client copy command to extract files outside the working path. The highest threat from this vulnerability is to integrity and...

7.4CVSS3.6AI score0.01312EPSS
SaveExploits0References4
Rows per page
Query Builder