Vulnerabilities > CVE-2021-25738 - Deserialization of Untrusted Data vulnerability in Kubernetes Java

047910
CVSS 6.7 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
kubernetes
CWE-502
NVD
Published: 2021-10-11
Updated: 2022-10-28

Summary

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.

Vulnerable Configurations

Part Description Count
Application
Kubernetes
28

Common Weakness Enumeration (CWE)

References