CVE-2021-25738
MEDIUMKubernetes Java < 9.0.2 - Insecure Deserialization
Title source: ruleDescription
Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.
References (3)
Scores
CVSS v3
6.7
EPSS
0.0012
EPSS Percentile
30.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-502
CWE-20
Status
published
Affected Products (2)
kubernetes/java
< 9.0.2
io.kubernetes/client-java
< 11.0.1Maven
Timeline
Published
Oct 11, 2021
Tracked Since
Feb 18, 2026