GO-2022-0703
XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes
At a glance
- Published
- Updated
- CVE
- CVE-2019-11253
- Aliases
- GHSA-pmqp-h87c-mr78
Description
XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes
Affected packages
| Package | Versions |
|---|---|
| Go · k8s.io/kubernetes | introduced 1.0.0, fixed 1.13.12, introduced 1.14.0, fixed 1.14.8, introduced 1.15.0, fixed 1.15.5, introduced 1.16.0, fixed 1.16.2 |
References
- https://github.com/advisories/GHSA-pmqp-h87c-mr78 ADVISORY
- https://access.redhat.com/errata/RHSA-2019:3239 WEB
- https://access.redhat.com/errata/RHSA-2019:3811 WEB
- https://access.redhat.com/errata/RHSA-2019:3905 WEB
- https://gist.github.com/bgeesaman/0e0349e94cd22c48bf14d8a9b7d6b8f2 WEB
- https://github.com/kubernetes/kubernetes/issues/83253 WEB
- https://github.com/kubernetes/kubernetes/pull/83261 WEB
- https://groups.google.com/forum/#!topic/kubernetes-security-announce/jk8polzSUxs WEB
- https://security.netapp.com/advisory/ntap-20191031-0006 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |