Kubernetes External-Provisioner vulnerabilities

1 known vulnerability affecting kubernetes/external-provisioner.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2019-11255MEDIUMCVSS 6.5≥ 0.4.1, ≤ 0.4.2≥ 1.0.0, ≤ 1.0.1+2 more2019-12-05

CVE-2019-11255 [MEDIUM] CWE-20 CVE-2019-11255: Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (<v0.4.3, <v Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (<v0.4.3, <v1.0.2, v1.1, <v1.2.2, <v1.3.1), external-snapshotter (<v0.4.2, <v1.0.2, v1.1, <1.2.2), and external-resizer (v0.1, v0.2) could result in unauthorized PersistentVolume data access or volume mutation during snapshot, restore from snapshot, cloning and re