CVE-2022-3172mediumCWE-918

CVE-2022-3172: medium-severity vulnerability in Kubernetes kube-apiserver

Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)

Published · Updated

Follow this CVE+ Monitor kube-apiserver+ Monitor kubernetes

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.1epss 2.5%
A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third parties.
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L
Affected products
Kubernetes · kube-apiserver
Related CVEs — Kubernetes kube-apiserver

In the same product, most dangerous first.

CVE-2024-7598LOWNetwork restriction bypass via race condition during namespace terminationEPSS 0.3%