Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:29099
HistoryJan 22, 2021 - 2:20 a.m.

Directory Traversal

2021-01-2202:20:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
github
kubernetes
secrets
host filesystem
var/lib/kubelet/pods
kubernetes secrets

EPSS

0.001

Percentile

37.3%

github.com/kubernetes-sigs/secrets-store-csi-driver is vulnerable to directory traversal. An attacker can gain access to host filesystem including paths under var/lib/kubelet/pods that contain other Kubernetes Secrets.

EPSS

0.001

Percentile

37.3%