Launch Week Day 1: Announcing Security Design Review
LOW 3.0 Go

kubectl ANSI escape characters not filtered

GHSA-f9jg-8p32-2f55 · CVE-2021-25743 · GO-2022-0983

Published · Modified

Description

kubectl (k8s.io/kubernetes/pkg/kubectl) does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.

Ready to move

Start Securing

Free, no credit card | First findings in minutes