{
"id": "GHSA-f9jg-8p32-2f55",
"aliases": [
"CVE-2021-25743"
],
"details": "kubectl (k8s.io/kubernetes/pkg/kubectl) does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.",
"summary": "kubectl ANSI escape characters not filtered",
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.26.0-alpha.3"
}
]
}
],
"package": {
"name": "k8s.io/kubernetes",
"ecosystem": "Go"
}
}
],
"modified": "2023-10-02T15:53:13Z",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N"
}
],
"published": "2022-01-08T00:00:21Z",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25743",
"type": "ADVISORY"
},
{
"url": "https://github.com/kubernetes/kubernetes/issues/101695",
"type": "WEB"
},
{
"url": "https://github.com/kubernetes/kubernetes/pull/112553",
"type": "WEB"
},
{
"url": "https://github.com/kubernetes/kubernetes/commit/dad0e937c0f76344363eb691b2668490ffef8537",
"type": "WEB"
},
{
"url": "https://github.com/kubernetes/kubernetes",
"type": "PACKAGE"
},
{
"url": "https://security.netapp.com/advisory/ntap-20220217-0003",
"type": "WEB"
}
],
"schema_version": "1.4.0",
"database_specific": {
"cwe_ids": [
"CWE-150"
],
"severity": "LOW",
"github_reviewed": true,
"nvd_published_at": "2022-01-07T00:15:00Z",
"github_reviewed_at": "2022-09-07T23:58:59Z"
}
}