Log in Start free

Vulnerability · Published Jan 21, 2021 · Assigned by kubernetes

CVE-2020-8570Kubernetes Java client libraries unvalidated path traversal in Copy implementation

Critical 9.1

In plain English

A critical-severity security flaw in Kubernetes Java Client from Kubernetes. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.7% (higher than 90% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)9.1Critical
Exploit odds (30 days)3.7%top 10.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC

Official description

Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of the process executing the client code.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Mavenio.kubernetes:client-java9.0.2GHSA-cghx-9gcr-r42x
Mavenio.kubernetes:client-java10.0.1GHSA-cghx-9gcr-r42x

Affected products (as reported)

VendorProductVersions
Kubernetes Kubernetes Java Client all versions prior to 9.09.0 – before 9.0.210.0 – before 10.0.1

Weakness: CWE-23

References