Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2022/05/24 5:44 p.m.38 views

Improper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client copy command to extract files outside the working path. The highest threat from this vulnerability is to integrity and...

7.4CVSS3.8AI score0.00594EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2021/03/16 9:15 p.m.14 views

CVE-2021-20218

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client copy command to extract files outside the working path. The highest threat from this vulnerability is to integrity and...

7.4CVSS0.00594EPSS
Exploits0References2
Prion
Prion
added 2021/03/16 9:15 p.m.20 views

Design/Logic Flaw

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client copy command to extract files outside the working path. The highest threat from this vulnerability is to integrity and...

5.8CVSS7.3AI score0.00594EPSS
Exploits0References2Affected Software6
CNNVD
CNNVD
added 2021/03/16 12:0 a.m.2 views

Rohan Kumar kubernetes-client 路径遍历漏洞

Rohan Kumar kubernetes-client is an open source application by Rohan Kumar. Provides smooth DSL access to the full Kubernetes and OpenShift REST APIs. A security vulnerability exists in fabric8 kubernetes-client in version 4.2.0 and after, which stems from the copy command lifting files outside o...

7.4CVSS6.6AI score0.00594EPSS
Exploits0References13
RedhatCVE
RedhatCVE
added 2021/02/02 11:37 a.m.40 views

CVE-2021-20218

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client copy command to extract files outside the working path. The highest threat from this vulnerability is to integrity and...

7.4CVSS3.6AI score0.00594EPSS
Exploits0References4
Rows per page
Query Builder