-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper validation in node proxying logic. The ProxyREST.Connect function is responsible for handling node proxy requests and validating target addresses. The vulnerability allowed bypassing network restrictions by accepting unvalidated address types (like InternalIP instead of ExternalIP) or localhost addresses. This matches the CWE-20 (Improper Input Validation) classification and aligns with the described attack vector where modified Node objects could route requests to API server's private network.
GoGo| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/kubernetes/kubernetes | go | >= 1.25.0, < 1.25.4 | 1.25.4 |
| github.com/kubernetes/kubernetes | go | >= 1.22.0, < 1.22.16 | 1.22.16 |
| github.com/kubernetes/kubernetes | go | >= 1.24.0, < 1.24.8 | 1.24.8 |
| github.com/kubernetes/kubernetes | go | >= 1.23.0, < 1.23.14 | 1.23.14 |
Ongoing coverage of React2Shell