Skip to content
CVE PROGRAM SOURCE RECORD3.0 Low

CVE-2021-25743

ANSI escape characters in kubectl output are not being filtered

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
kubernetes

Description

kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kubernetes Kubernetes

  • unspecified to ≤ 1.23.1affected
  • next of 1.23.1 to < unspecifiedunknown
  • unspecified to ≤ 1.22.5affected
  • next of 1.22.5 to < unspecifiedunknown
  • unspecified to ≤ 1.21.8affected
  • next of 1.21.8 to < unspecifiedunknown
  • unspecified to ≤ 1.20.14affected
  • next of 1.20.14 to < unspecifiedunknown

References