CVE-2022-3172CWE-918

Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)

Medium · published November 3, 2023

CVSS v3.1
5.1
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

A security issue was discovered in kube-apiserver that allows an

aggregated API server to redirect client traffic to any URL. This could

lead to the client performing unexpected actions as well as forwarding

the client's API server credentials to third parties.

The record
Technical detail
CVSS v3.1
5.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.02464 · 84.3th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2023-11-03T18:11Z
EPSS history
Timeline
  • 03 NOV 18:11Z
    Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)
    cvelistv5