GitHub Advisoryadvisory · Go

GHSA-f9jg-8p32-2f55 kubectl ANSI escape characters not filtered

LOW Published 2022-01-08 Modified 2023-10-02 Official page ↗
Aliases
CVE-2021-25743
Ecosystem
Go
Packages
k8s.io/kubernetes
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N
Weaknesses
CWE-150
Reviewed
2022-09-07

Affected packages

• Go k8s.io/kubernetes: < 1.26.0-alpha.3 → fixed in 1.26.0-alpha.3

Description

kubectl (k8s.io/kubernetes/pkg/kubectl) does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.

Related

Alias · CVE (1)

  • CVE-2021-25743 kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. vulnerability

Weakness · CWE (1)

  • CWE-150 Improper Neutralization of Escape, Meta, or Control Sequences weakness

References