Database/Container, Kubernetes & orchestration

kubernetes-csi-proxy: Insufficient input sanitisation in csi-proxy leads to Windows node admin

CVE-2023-3893Container, Kubernetes & orchestrationcurated

Impact

Insufficient input sanitisation in csi-proxy leads to Windows node admin

Who can reach it

Cluster user able to create pods with CSI volumes on Windows

What to do

Upgrade csi-proxy; Windows node drain

References

https://kubernetes.io/docs/reference/issues-security/official-cve-feed/

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.