Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2021-25743

kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.

CVSS v3:

  • Severity: Low
  • Score: 3
  • AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:N/AC:H/Au:S/C:N/I:P/A:N

CWEs:

Software From Fixed in
Go icon k8s.io/kubernetes/pkg/kubectl - 1.25.2.x
kubernetes / kubernetes - 1.25.0.x
kubernetes / kubernetes 1.26.0-alpha.0 1.26.0-alpha.0.x
kubernetes / kubernetes 1.26.0-alpha.1 1.26.0-alpha.1.x
kubernetes / kubernetes 1.26.0-alpha.2 1.26.0-alpha.2.x