Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:20595
HistoryJun 24, 2019 - 4:57 a.m.

Directory Traversal

2019-06-2404:57:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15

EPSS

0.001

Percentile

45.4%

github.com/kubernetes/kubernetes is vulnerable to directory traversal. The vulnerability exists in the untarAll function due to improper handling of symlinks which allows a remote attacker to replace files on a users workstation using kubectl cp command.