Approved changes feed: RSS · Atom

cpe:2.3:a:kubernetes:apiserver:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKubernetes (3ee05930-9e42-51b2-ad52-30832f573b15)
ProductApiserver (477baeb2-0f1d-554b-ae13-38f6785d640b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/kubernetes/apiserver purl2cpe 2026-06-01 10:13:27.916826
pkg:golang/github.com/kubernetes/apiserver purl2cpe 2026-06-01 10:13:27.916828

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-32192 vulnerable 2026-06-03 14:51:57.793992 Rancher API Server Cross-site Scripting Vulnerability
HIGH (8.3)
A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in the API Server's public API endpoint can be exploited, allowing an attacker to execute arbitrary JavaScript code in the victim browser
Published: 2024-10-16T12:23:17.271Z
Updated: 2024-10-16T17:25:48.514Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3172 vulnerable 2026-06-03 14:47:52.387929 Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)
MEDIUM (5.1)
A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third parties.
Published: 2023-11-03T18:11:53.835Z
Updated: 2025-02-13T16:32:41.378Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.