1. Home
  2. CVE Database
  3. CVE-2021-25743
LOW · 3.0

CVE-2021-25743

kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as ...

Vulnerability Description

kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.

CVSS Score

3.0

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
KubernetesKubernetes<= 1.25.0

Related Weaknesses (CWE)

CWE-150

References

FAQ

What is CVE-2021-25743?

CVE-2021-25743 is a vulnerability with a CVSS score of 3.0 (LOW). kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as ...

How severe is CVE-2021-25743?

CVE-2021-25743 has been rated LOW with a CVSS base score of 3.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-25743?

Check the references section above for vendor advisories and patch information. Affected products include: Kubernetes Kubernetes.