GO-2022-0890
Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes
At a glance
- Published
- Updated
- CVE
- CVE-2020-8555
- Aliases
- GHSA-x6mj-w4jf-jmgw
Description
Server Side Request Forgery (SSRF) in Kubernetes in k8s.io/kubernetes
Affected packages
| Package | Versions |
|---|---|
| Go · k8s.io/kubernetes | introduced 0, fixed 1.15.12, introduced 1.16.0, fixed 1.16.9, introduced 1.17.0, fixed 1.17.4, introduced 1.18.0, fixed 1.18.1 |
References
- https://github.com/advisories/GHSA-x6mj-w4jf-jmgw ADVISORY
- http://www.openwall.com/lists/oss-security/2020/06/01/4 WEB
- http://www.openwall.com/lists/oss-security/2021/05/04/8 WEB
- https://github.com/kubernetes/kubernetes/issues/91542 WEB
- https://github.com/kubernetes/kubernetes/pull/89794 WEB
- https://groups.google.com/d/topic/kubernetes-security-announce/kEK27tqqs30/discussion WEB
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SOCLOPTSYABTE4CLTSPDIFE6ZZZR4LX WEB
- https://security.netapp.com/advisory/ntap-20200724-0005 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |