Go/k8s.io/kubernetes CVE-2022-3162: unknown, EPSS 1.45%
Kubernetes vulnerable to path traversal in k8s.io/kubernetes
Action: Upgrade k8s.io/kubernetes to 1.22.16 or later.
go get k8s.io/kubernetes@v1.22.16go get k8s.io/kubernetes@v1.23.14go get k8s.io/kubernetes@v1.24.8go get k8s.io/kubernetes@v1.25.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.22.0 | 1.22.16 | - |
| 1.23.0 | 1.23.14 | - |
| 1.24.0 | 1.24.8 | - |
| 1.25.0 | 1.25.4 | - |
Fixed versions
| 1.22.16 | 1.23.14 | 1.24.8 | 1.25.4 |
Sources
- osv: GO-2023-1628
- https://github.com/advisories/GHSA-2394-5535-8j88
- https://github.com/kubernetes/kubernetes/issues/113756
- https://groups.google.com/g/kubernetes-security-announce/c/iUd550j7kjA
- https://security.netapp.com/advisory/ntap-20230511-0004
CVE-2022-3162 · published · modified · JSON