CVSS 3.1
3.0 lowCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:NCVE-2021-25743
Low (3.0) in kubernetes kubernetes. EPSS 0.8% chance of exploitation in the next 30 days. Fixed in k8s.io/kubernetes 1.26.0-alpha.3.
kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
- CWE
- CWE-150
- Published
- Modified
- Record from
- the NVD, synced
Affected
- kubernetes:kubernetes
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-f9jg-8p32-2f55 | Go | k8s.io/kubernetes | <1.26.0-alpha.3 | 1.26.0-alpha.3 |
| GO-2022-0983 | Go | k8s.io/kubernetes | <1.26.0-alpha.3 | 1.26.0-alpha.3 |