cve.bz

CVE-2021-25740

3.1 lowEPSS 2.0%

Low (3.1) in kubernetes kubernetes. EPSS 2.0% chance of exploitation in the next 30 days.

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.

Severity

CVSS 3.1

3.1 low
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWEs
CWE-610, CWE-441
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-vw47-mr44-3jf9Gok8s.io/kubernetes<=1.22.2no fix published

References

Check your stackJSON