The Helm Project Helm vulnerabilities

1 known vulnerability affecting the_helm_project/helm.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2020-4053MEDIUMCVSS 6.8v>= 3.0.0, < 3.2.42020-06-16

CVE-2020-4053 [MEDIUM] CWE-22 CVE-2020-4053: In Helm greater than or equal to 3.0.0 and less than 3.2.4, a path traversal attack is possible when In Helm greater than or equal to 3.0.0 and less than 3.2.4, a path traversal attack is possible when installing Helm plugins from a tar archive over HTTP. It is possible for a malicious plugin author to inject a relative path into a plugin archive, and copy a file outside of the intended directory. This has been fixed in 3.2.4.