Directory Traversal

2018-04-1604:45:43

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0005 Low

EPSS

Percentile

17.3%

JSON

github.com/kubernetes/kubernetes is vulnerable to directory traversals. The library does not properly validate filepaths when copying files to a pod, allowing a malicious user to traverse the directory.

CPENameOperatorVersion
github.com/kubernetes/kuberneteseqHEAD
github.com/kubernetes/kubernetesle1.10.0-beta.4
atomic-openshift-web-consoleeq3.9.27__1.git.242.0fcf673.el7
atomic-openshift-web-consoleeq3.9.14__1.git.229.04c20c2.el7
golang-github-prometheus-node_exportereq3.9.27__1.git.887.8969372.el7
golang-github-prometheus-node_exportereq0.15.1__1.gitba5da2c.el7
golang-github-prometheus-node_exportereq0.15.2__2.git98bc649.el7
rubygem-fluent-plugin-elasticsearcheq1.3.0__2.el7
rubygem-fluent-plugin-elasticsearcheq1.9.5.1__1.el7
rubygem-fluent-plugin-elasticsearcheq1.13.0__1.el7

Name	Operator	Version
github.com/kubernetes/kubernetes	eq	HEAD
github.com/kubernetes/kubernetes	le	1.10.0-beta.4
atomic-openshift-web-console	eq	3.9.27__1.git.242.0fcf673.el7
atomic-openshift-web-console	eq	3.9.14__1.git.229.04c20c2.el7
golang-github-prometheus-node_exporter	eq	3.9.27__1.git.887.8969372.el7
golang-github-prometheus-node_exporter	eq	0.15.1__1.gitba5da2c.el7
golang-github-prometheus-node_exporter	eq	0.15.2__2.git98bc649.el7
rubygem-fluent-plugin-elasticsearch	eq	1.3.0__2.el7
rubygem-fluent-plugin-elasticsearch	eq	1.9.5.1__1.el7
rubygem-fluent-plugin-elasticsearch	eq	1.13.0__1.el7