cve.bz

CVE-2025-24884

5.1 mediumEPSS 0.2%

Medium (5.1). EPSS 0.2% chance of exploitation in the next 30 days. Fixed in github.com/RichardoC/kube-audit-rest 0.0.0-20250129191722-db1aa5b86725, 0.0.0-20250205113217-9df8886b4819.

kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. This vulnerability is fixed in 1.0.16.

Severity

CVSS 4.0

5.1 medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-10-31)
CWEs
CWE-200, CWE-212, CWE-532
Published
Modified
Record from
the NVD, synced

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-hcr5-wv4p-h2g2Gogithub.com/RichardoC/kube-audit-rest<0.0.0-20250205113217-9df8886b48190.0.0-20250205113217-9df8886b4819
GO-2025-3431Gogithub.com/RichardoC/kube-audit-rest<0.0.0-20250129191722-db1aa5b867250.0.0-20250129191722-db1aa5b86725

References

Check your stackJSON