| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/kubernetes-csi/external-provisioner | = 1.1≥ 1.0.0, < 1.0.2≥ 1.2.0, < 1.2.2≥ 1.3.0, < 1.3.1< 0.4.3 | 1.0.21.2.21.3.10.4.3 |
| github.com/kubernetes-csi/external-resizer | = 0.1= 0.2 | |
| github.com/kubernetes-csi/external-snapshotter/v6 | = 1.1≥ 1.0.0, < 1.0.2≥ 1.2.0, < 1.2.2 | 1.0.21.2.2 |
| external-provisioner | = 1.3.0≥ 0.4.1, ≤ 0.4.2≥ 1.0.0, ≤ 1.0.1≥ 1.1.0, ≤ 1.2.1 | |
| external-resizer | ≥ 0.1.0, ≤ 0.2.0 | |
| external-snapshotter | ≥ 0.4.0, ≤ 0.4.1≥ 1.0.0, ≤ 1.0.1≥ 1.1.0, ≤ 1.2.1 | |
| openshift container platform | = 3.11= 4.1= 4.2 |
Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (<v0.4.3, <v1.0.2, v1.1, <v1.2.2, <v1.3.1), external-snapshotter (<v0.4.2, <v1.0.2, v1.1, <1.2.2), and external-resizer (v0.1, v0.2) could result in unauthorized PersistentVolume data access or volume mutation during snapshot, restore from snapshot, cloning and resizing operations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free