Maven/io.kubernetes:client-java CVE-2020-8570: high 7.5, EPSS 3.69%
Path Traversal in the Java Kubernetes Client
Action: Upgrade io.kubernetes:client-java to 9.0.2 (9.x) or 10.0.1 (10.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.0.2 | - |
| 10.0.0 | 10.0.1 | - |
Fixed versions
| 9.0.2 | 10.0.1 |
Sources
- osv: GHSA-cghx-9gcr-r42x
- https://nvd.nist.gov/vuln/detail/CVE-2020-8570
- https://github.com/kubernetes-client/java/issues/1491
- https://github.com/kubernetes-client/java/pull/1450
- https://github.com/kubernetes-client/java/commit/858316ae8bc1145005a0310e1f65f95d2389a589
- https://github.com/kubernetes-client/java
- https://groups.google.com/g/kubernetes-security-announce/c/sd5h73sFPrg
- https://lists.apache.org/thread.html/r0c76b3d0be348f788cd947054141de0229af00c540564711e828fd40@%3Ccommits.druid.apache.org%3E
- https://lists.apache.org/thread.html/r1975078e44d96f2a199aa90aa874b57a202eaf7f25f2fde6d1c44942@%3Ccommits.druid.apache.org%3E
- https://lists.apache.org/thread.html/rcafa485d63550657f068775801aeb706b7a07140a8ebbdef822b3bb3@%3Ccommits.druid.apache.org%3E
- https://lists.apache.org/thread.html/rdb223e1b82e3d7d8e4eaddce8dd1ab87252e3935cc41c859f49767b6@%3Ccommits.druid.apache.org%3E
CVE-2020-8570 · published · modified · JSON