Back to search
CVE-2021-20218
Published: Mar 16, 2021
Modified: Aug 3, 2024
PUBLISHED
Description
A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability is to integrity and system availability. This has been fixed in kubernetes-client-4.13.2 kubernetes-client-5.0.2 kubernetes-client-4.11.2 kubernetes-client-4.7.2
| Vendor | Product | Versions |
|---|---|---|
n/a | fabric8-kubernetes-client | affected kubernetes-client-4.2.0 and after |
Weaknesses (CWE)
References
https://bugzilla.redhat.com/show_bug.cgi?id=1923405
x_refsource_MISC
https://github.com/fabric8io/kubernetes-client/issues/2715
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now