En resumen
- CVE-2021-25741 es una vulnerabilidad ALTO (CVSS 8.1) que afecta a k8s.io/kubernetes, kubernetes (kubernetes).
- Probabilidad de explotación en los próximos 30 días (EPSS): 8.0%, mayor que el 94.7% de las vulnerabilidades.
- Solución: actualizar a 1.20.11, 1.21.5, 1.22.2, 1.19.15 o posterior.
| Package | Affected versions | Patched versions |
|---|
| k8s.io/kubernetes Go | ≥ 1.20.0, < 1.20.11≥ 1.21.0, < 1.21.5≥ 1.22.0, < 1.22.2< 1.19.15
| 1.20.111.21.51.22.21.19.15
|
| kubernetes | ≥ 1.20.0, ≤ 1.20.10≥ 1.21.0, ≤ 1.21.4≥ 1.22.0, ≤ 1.22.1≤ 1.19.14
| No fix yet |
Description
A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.
NVD description
A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.
Más vulnerabilidades de k8s.io/kubernetes
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free