kubernetes-client/java · Security
Code injection in Kubernetes Java Client
- GHSA ID
- GHSA-m8wh-mqgf-rr8g
- CVE ID
- CVE-2021-25738
- Severity
- medium
- Published
- Updated
- CVSS
- 6.7 · CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS v3
- 6.7 · CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.
CWEs
- CWE-20 · Improper Input Validation
- CWE-502 · Deserialization of Untrusted Data