Database/Container, Kubernetes & orchestration
Kubernetes (kubectl): kubectl does not neutralise ANSI escape sequences in output
CVE-2021-25743Container, Kubernetes & orchestrationcurated
Impact
kubectl does not neutralise ANSI escape sequences in output; terminal injection on the operator's machine
Who can reach it
Any tenant who can set an object field the operator will print
What to do
Upgrade kubectl on operator machines
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.