Lucene search

Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-E57D8E3E01DBCCC03DE63F70574EFB76

HistoryJul 22, 2020 - 12:00 a.m.

URL Redirection to Untrusted Site (Open Redirect)

2020-07-2200:00:00

https://gitlab.com/gitlab-org/security-products/gemnasium-db

gitlab.com

0.003 Low

EPSS

Percentile

71.5%

JSON

The Kubernetes kube-apiserver is vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a full cluster compromise.

CPENameOperatorVersion
go/k8s.io/kubernetes/pkg/apis/apps/validationge1.6.0
go/k8s.io/kubernetes/pkg/apis/apps/validationlt1.16.13
go/k8s.io/kubernetes/pkg/apis/apps/validationge1.17.0
go/k8s.io/kubernetes/pkg/apis/apps/validationlt1.17.9
go/k8s.io/kubernetes/pkg/apis/apps/validationge1.18.0
go/k8s.io/kubernetes/pkg/apis/apps/validationlt1.18.6

Name	Operator	Version
go/k8s.io/kubernetes/pkg/apis/apps/validation	ge	1.6.0
go/k8s.io/kubernetes/pkg/apis/apps/validation	lt	1.16.13
go/k8s.io/kubernetes/pkg/apis/apps/validation	ge	1.17.0
go/k8s.io/kubernetes/pkg/apis/apps/validation	lt	1.17.9
go/k8s.io/kubernetes/pkg/apis/apps/validation	ge	1.18.0
go/k8s.io/kubernetes/pkg/apis/apps/validation	lt	1.18.6