id: GO-2022-0910
modules:
    - module: k8s.io/kubernetes
      versions:
        - fixed: 1.19.15
        - introduced: 1.20.0
        - fixed: 1.20.11
        - introduced: 1.21.0
        - fixed: 1.21.5
        - introduced: 1.22.0
        - fixed: 1.22.2
      vulnerable_at: 1.22.2-rc.0
summary: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes
cves:
    - CVE-2021-25741
ghsas:
    - GHSA-f5f7-6478-qm6p
references:
    - advisory: https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-f5f7-6478-qm6p
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2021-25741
    - web: https://github.com/kubernetes/kubernetes/issues/104980
    - web: https://groups.google.com/g/kubernetes-security-announce/c/nyfdhK24H7s
    - web: https://security.netapp.com/advisory/ntap-20211008-0006
source:
    id: GHSA-f5f7-6478-qm6p
    created: 2024-08-20T14:29:05.823528-04:00
review_status: UNREVIEWED
unexcluded: NOT_IMPORTABLE