CVE-2015-5305
Directory traversal vulnerability in Kubernetes, as used in Red Hat OpenShift Enterprise 3.0, allows attackers to write to arbitrary files via a crafted object type name, which is not properly handled before passing it to etcd.
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:openshift
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-jp32-vmm6-3vf5 | Go | github.com/kubernetes/kubernetes | <1.1.1 | 1.1.1 |
| GHSA-jp32-vmm6-3vf5 | Go | k8s.io/kubernetes | <1.1.1 | 1.1.1 |
| GO-2022-0701 | Go | k8s.io/kubernetes | <1.1.1 | 1.1.1 |