CVE-2021-4178CWE-502

A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above

published August 24, 2022

CVSS
—
EPSS
0%
Percentile
25.7
In the wild
Unconfirmed
What it is

A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00335 · 25.7th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2022-08-24T15:02Z
EPSS history
Timeline
  • 24 AUG 15:02Z
    A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above
    cvelistv5