CVE-2023-3893
CVE-2023-3893 · Kubernetes - csi-proxy - Insufficient input sanitization leads to privilege escalation
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy.
CVSS 8.8 · High · EPSS 2.5% · Fix available
- Published
- Updated
Stack: system · containers
Affected products and versions
csi-proxy
- Versions
- v2.0.0-alpha.0: Affected
- ≥ 0, ≤ v1.1.2: Affected (semver)
- v2.0.0-alpha.1: Not affected
- v1.1.3: Not affected
No fix published
kubernetes Debian:12
- Affected ranges
- ECOSYSTEM: < 1.20.5+really1.20.2-1
Update to 1.20.5+really1.20.2-1
kubernetes Debian:13
- Affected ranges
- ECOSYSTEM: < 1.20.5+really1.20.2-1
Update to 1.20.5+really1.20.2-1
kubernetes Debian:14
- Affected ranges
- ECOSYSTEM: < 1.20.5+really1.20.2-1
Update to 1.20.5+really1.20.2-1