Description (CNA)
The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Kubernetes / kubelet | affected 0 through 1.28.11; affected 1.29.0 through 1.29.6; affected 1.30.0 through 1.30.2; unaffected 1.31.0; unaffected 1.30.3; unaffected 1.29.7; unaffected 1.28.12 |
CWE
CWE-22
References
- https://github.com/kubernetes/kubernetes/issues/128885
- https://groups.google.com/g/kubernetes-security-announce/c/ptNgV5Necko
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.