Apiserver vulnerabilities

2 known vulnerabilities in Apiserver from Kubernetes. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  apiserver: Improper Neutralization of Script-Related HTML Tags in a Web Page

  CVE-2023-32192Oct 16, 2024SUSE

  A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in the API Server's public API endpoint can be exploited, allowing an attacker to execute arbitrary JavaScript code in the victim browser

• 8.2 High severity

  kube-apiserver: Server-Side Request Forgery

  CVE-2022-3172Nov 3, 2023KubernetesEPSS 2.46%

  A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third parties