CVE-2020-8570

—

CVSS 3.1

9.1 critical

EPSS

4%p89

Published

Jan 21, 2021 (Jan 21, 2021)

Modified

Jun 17, 2026

Description

Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of the process executing the client code.

Vendors: kubernetes
Products: java
Weakness: CWE-23, CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.6%)

In the news0 stories

No ingested article mentions this CVE yet.