Java
by Cri O
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-8570 | Cri | 0.52 | 9.1 | 0.04 | Jan 21, 2021 | Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system… | ||
| CVE-2021-25738 | Med | 0.44 | 6.7 | 0.00 | Oct 11, 2021 | Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution. |
- risk 0.52cvss 9.1epss 0.04
Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system…
- risk 0.44cvss 6.7epss 0.00
Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.