{"action":"Upgrade k8s.io/apiextensions-apiserver to 0.13.9 or later.","affected":[{"fixed":"0.13.9","introduced":"0.7.0"},{"fixed":"0.14.5","introduced":"0.14.0"},{"fixed":"0.15.2","introduced":"0.15.0"}],"component":"k8s.io/apiextensions-apiserver","cve_ids":["CVE-2019-11247"],"ecosystem":"Go","epss":0.0215,"exploited":false,"fixed_versions":["0.13.9","0.14.5","0.15.2"],"ghsa_id":"GHSA-fp37-c92q-4pwq","id":"tcs_01M5KF9H1W4VDA58RAGWYFRN4A","modified_at":"2023-11-08T04:01:00.171843Z","published_at":"2022-05-24T16:55:06Z","references":["https://osv.dev/vulnerability/GHSA-fp37-c92q-4pwq","https://nvd.nist.gov/vuln/detail/CVE-2019-11247","https://github.com/kubernetes/kubernetes/issues/80983","https://github.com/kubernetes/kubernetes/pull/80750","https://github.com/kubernetes/kubernetes/pull/80850","https://github.com/kubernetes/kubernetes/pull/80851","https://github.com/kubernetes/kubernetes/pull/80852","https://github.com/kubernetes/apiextensions-apiserver/commit/b9b7d2b3f32f8edbeb47b8726710eeb868bce196","https://access.redhat.com/errata/RHBA-2019:2816","https://access.redhat.com/errata/RHBA-2019:2824","https://access.redhat.com/errata/RHSA-2019:2690","https://access.redhat.com/errata/RHSA-2019:2769","https://github.com/kubernetes/apiextensions-apiserver","https://groups.google.com/d/msg/kubernetes-security-announce/vUtEcSEY6SM/v2ZZxsmtFQAJ","https://security.netapp.com/advisory/ntap-20190919-0003"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-fp37-c92q-4pwq","url":"https://osv.dev/vulnerability/GHSA-fp37-c92q-4pwq"}],"summary":"Kubernetes kube-apiserver unauthorized access"}