CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:NCVE-2023-2727
Medium (6.5) in kubernetes kubernetes. EPSS 1.1% chance of exploitation in the next 30 days. Fixed in k8s.io/kubernetes 1.24.15, 1.25.11, 1.26.6.
Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- kubernetes:kubernetes
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-qc2g-gmh6-95p4 | Go | k8s.io/kubernetes | >=1.27.0 <1.27.3 | 1.27.3 |
| GHSA-qc2g-gmh6-95p4 | Go | k8s.io/kubernetes | >=1.26.0 <1.26.6 | 1.26.6 |
| GHSA-qc2g-gmh6-95p4 | Go | k8s.io/kubernetes | >=1.25.0 <1.25.11 | 1.25.11 |
| GHSA-qc2g-gmh6-95p4 | Go | k8s.io/kubernetes | <1.24.15 | 1.24.15 |
| GO-2023-1891 | Go | k8s.io/kubernetes | <1.24.15 >=1.25.0 <1.25.11 >=1.26.0 <1.26.6 >=1.27.0 <1.27.3 | 1.24.15, 1.25.11, 1.26.6, 1.27.3 |