| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/kubernetes-csi/csi-proxy | ≥ 0.1.0-rc1, < 1.1.3≥ 1.1.3-0, < 1.1.3-0.20230821192013-2523e6674ded< 0.0.0-20230821192013-2523e6674ded< 1.1.3 | 1.1.31.1.3-0.20230821192013-2523e6674ded0.0.0-20230821192013-2523e6674ded |
| github.com/kubernetes-csi/csi-proxy/v2 | ≥ 2.0.0-alpha.0, < 2.0.0-alpha.1 | 2.0.0-alpha.1 |
| csi proxy | = 2.0.0≤ 1.1.2 |
Kubernetes is vulnerable to privilege escalation when a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free