Approved changes feed: RSS · Atom

cpe:2.3:a:google_llc:kubevirt:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGoogle Llc (c72c74b5-1c39-5d47-98b8-8dacb6f7d99a)
ProductKubevirt (ab26da3d-63d9-5f8a-86a4-aa08b7e1f21c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-1798 vulnerable 2026-06-03 14:45:59.638327 Path Traversal vulnerability in Kubevirt
HIGH (8.7)
A path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) on all platforms allows a user able to configure the kubevirt to read arbitrary files on the host filesystem which are publicly readable or which are readable for UID 107 or GID 107. /proc/self/<> is not accessible.
Published: 2022-09-15T15:45:12.000Z
Updated: 2025-04-21T13:49:58.573Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.