Description (CNA)
kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Kubernetes / Kubernetes | affected unspecified through 1.23.1; unknown next of 1.23.1 before unspecified; affected unspecified through 1.22.5; unknown next of 1.22.5 before unspecified; affected unspecified through 1.21.8; unknown next of 1.21.8 before unspecified; affected unspecified through 1.20.14; unknown next of 1.20.14 before unspecified |
CWE
CWE-150
References
- https://github.com/kubernetes/kubernetes/issues/101695
- https://security.netapp.com/advisory/ntap-20220217-0003/
ADP enrichment
No English description supplied.