CVE-2021-25743CWE-150

ANSI escape characters in kubectl output are not being filtered

Low · published January 7, 2022

CVSS v3.1
3.0
EPSS
1%
Percentile
55.6
In the wild
Unconfirmed
What it is

kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.

The record
Technical detail
CVSS v3.1
3.0 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00785 · 55.6th percentile
Weakness
CWE-150 · Improper Neutralization of Escape, Meta, or Control Sequences
Published
2022-01-07T00:00Z
EPSS history
Timeline
  • 07 JAN 00:00Z
    ANSI escape characters in kubectl output are not being filtered
    cvelistv5