Database/Container, Kubernetes & orchestration
Kubernetes (kube-apiserver): Aggregated API server can redirect apiserver clients
CVSS 5.1CVE-2022-3172Container, Kubernetes & orchestrationcurated
Impact
Aggregated API server can redirect apiserver clients; SSRF from the control plane
Who can reach it
Whoever controls an aggregated APIService backend
What to do
Rolling control-plane upgrade; audit registered APIServices
References
Related entries
- Kubernetes (kube-apiserver): Admission webhook responses redirect apiserver requests into private networksCVE-2020-8561 · Kubernetes (kube-apiserver)Medium
- Kubernetes (kube-apiserver): NetworkPolicy is not applied during a race in namespace termination, so pods briefly runCVE-2024-7598 · Kubernetes (kube-apiserver)Low
- Kubernetes (kube-apiserver): Init/ephemeral container envFrom bypasses the ServiceAccount mountable-secrets policyCVE-2024-3177 · Kubernetes (kube-apiserver)Low
- Kubernetes (kube-apiserver): Nodes can bypass DRA authorization checksCVE-2025-4563 · Kubernetes (kube-apiserver)Low
- Kubernetes (kube-apiserver): TOCTOU/DNS-rebinding bypass of the link-local and localhost proxy protectionsCVE-2020-8562 · Kubernetes (kube-apiserver)Low
- Kubernetes (kube-apiserver): Cluster-scoped custom resources reachable through namespaced requests, so namespace-scopedCVE-2019-11247 · Kubernetes (kube-apiserver)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.