MediumCVSS 6.7
EPSS 0.47%
Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.
Product
Kubernetes Java Client vulnerabilities
2 published CVES affecting Kubernetes Java Client, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 1
- High
- 0
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest Kubernetes Java Client CVEs
Newest publication first
-
-
CVE-2020-8570 Kubernetes Java client libraries unvalidated path traversal in Copy implementation
PublishedCriticalCVSS 9.1 EPSS 3.7%Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.