Lucene search
Veracode Vulnerability DatabaseVERACODE:30529HistoryMay 19, 2021 - 4:07 a.m.
Arbitrary Code Execution
2021-05-1904:07:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.0004 Low
EPSS
Percentile
15.9%
kubernetes java client is vulnerable to arbitrary code execution. An attacker is able to execute arbtirary code on the host OS by loading malicious YAML files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| client-java | eq | 12.0.0 | |
| client-java | le | 11.0.1 |
References
discuss.kubernetes.io/t/kubernetes-java-client-cve-2021-25738-code-exec-via-yaml-parsing/15932
github.com/kubernetes-client/java/issues/1698
github.com/kubernetes-client/java/pull/1676
github.com/kubernetes-client/java/pull/1691
github.com/kubernetes-client/java/pull/1692
groups.google.com/g/kubernetes-security-announce/c/K_pOK2WbAJk
Related
osv
osv
Code injection in Kubernetes Java Client
2021-10-12 17:50:25
CVE-2021-25738
2021-10-11 19:15:07
cvelist
cvelist
CVE-2021-25738 Code exec via yaml parsing
2021-05-17 00:00:00
nvd
nvd
CVE-2021-25738
2021-10-11 19:15:07
github
github
Code injection in Kubernetes Java Client
2021-10-12 17:50:25
hackerone
hackerone
Kubernetes: Loading YAML in Java client can lead to command execution
2021-04-18 13:12:57
prion
prion
Remote code execution
2021-10-11 19:15:00
cve
cve
CVE-2021-25738
2021-10-11 19:15:07
redhatcve
redhatcve
CVE-2021-25738
2021-05-19 00:26:21
nessus
nessus
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0413
2023-06-19 00:00:00