Exploitation Summary
EIP tracks 2 public exploits for CVE-2021-25735. PoCs published by darryk10, securitystuffbackup.
AI-analyzed exploit summary This repository contains a functional exploit PoC for CVE-2021-25735, demonstrating a Kubernetes Validating Admission Webhook bypass. It includes a Node.js server that validates node label changes, along with deployment and registration YAML files to set up the vulnerable environment.
Description
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.
Exploits (2)
This repository contains a functional exploit PoC for CVE-2021-25735, demonstrating a Kubernetes Validating Admission Webhook bypass. It includes a Node.js server that validates node label changes, along with deployment and registration YAML files to set up the vulnerable environment.
This repository provides a functional exploit for CVE-2021-25735, demonstrating a Kubernetes Validating Admission Webhook bypass. It includes a Node.js server that validates node label changes, along with deployment and registration YAML files to set up the vulnerable environment.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H