Database/Container, Kubernetes & orchestration
kubernetes-csi-proxy: Insufficient input sanitisation in csi-proxy leads to Windows node admin
CVSS 8.8CVE-2023-3893Container, Kubernetes & orchestrationcurated
Impact
Insufficient input sanitisation in csi-proxy leads to Windows node admin
Who can reach it
Cluster user able to create pods with CSI volumes on Windows
What to do
Upgrade csi-proxy; Windows node drain
References
Related entries
- Kubernetes: Second Windows-node input-sanitisation escalation to adminCVE-2023-3955 · KubernetesHigh
- Slurm: slurmd message-integrity bypass permits reuse of root-level authentication tokensCVE-2023-49935 · SlurmHigh
- ingress-nginx: Annotation validation bypass reaching config injection and cluster-wide secret accessCVE-2024-7646 · ingress-nginxHigh
- ingress-nginx: Config injection via unsanitized auth-tls-match-cn annotationCVE-2025-1097 · ingress-nginxHigh
- ingress-nginx: Config injection via unsanitized mirror annotationsCVE-2025-1098 · ingress-nginxHigh
- ingress-nginx: Config injection via the auth-proxy-set-headers annotationCVE-2025-15566 · ingress-nginxHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.