Github.Com Kubernetes-Csi External-Snapshotter V6 vulnerabilities

1 known vulnerability affecting github.com/kubernetes-csi_external-snapshotter_v6.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2019-11255MEDIUM≥ 1.0.0, < 1.0.2≥ 1.2.0, < 1.2.22022-05-24

CVE-2019-11255 [MEDIUM] CWE-20 Kubernetes CSI Sidecar Containers Can Allow Unauthorized Data Access Kubernetes CSI Sidecar Containers Can Allow Unauthorized Data Access Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (<v0.4.3, <v1.0.2, v1.1, <v1.2.2, <v1.3.1), external-snapshotter (<v0.4.2, <v1.0.2, v1.1, <1.2.2), and external-resizer (v0.1, v0.2) could result in unauthorized PersistentVolume data access or volume mutation during snapshot, restore from sn