Lack of data validation - Path Traversal In k8s.io/kubernetes
Description
Kubernetes kubelet arbitrary command execution The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 13 | 1.20.5+really1.20.2-1 | ||
debian 11 | 1.20.5+really1.20.2-1 | ||
debian 12 | 1.20.5+really1.20.2-1 | ||
debian 14 | 1.20.5+really1.20.2-1 | ||
 go | 1.28.12, 1.29.7, 1.30.3 | ||
 rpm rhel10 | - | - | |
rpm rhel9 | - | - |
Aliases
1. 2. 3. 4. 5. 6.
References
1. 2. 3. 4. 5. 6.