Approved changes feed: RSS · Atom

cpe:2.3:a:kubernetes:csi_proxy:2.0.0:alpha0:*:*:*:*:*:*

part: a version: 2.0.0 update: alpha0

VendorKubernetes (3ee05930-9e42-51b2-ad52-30832f573b15)
ProductCsi Proxy (b24b287f-773d-5a81-b4ff-8878824e23ab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/kubernetes-csi/csi-proxy purl2cpe 2026-06-01 10:13:27.881629
pkg:golang/github.com/kubernetes-csi/csi-proxy purl2cpe 2026-06-01 10:13:27.881631

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3893 vulnerable 2026-06-03 14:52:42.084131 Kubernetes - csi-proxy - Insufficient input sanitization leads to privilege escalation
HIGH (8.8)
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy.
Published: 2023-11-03T17:34:10.188Z
Updated: 2025-02-13T17:02:36.473Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.