Approved changes feed: RSS · Atom

cpe:2.3:a:kubernetes:kubernetes:1.20.11:-:*:*:*:*:*:*

part: a version: 1.20.11 update: -

VendorKubernetes (3ee05930-9e42-51b2-ad52-30832f573b15)
ProductKubernetes (1a2d2535-9ff1-599e-92b3-aa33ed592780)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:code.google/kubernetes purl2cpe 2026-06-01 10:13:27.661561
pkg:github/kubernetes/kubernetes purl2cpe 2026-06-01 10:13:27.661563

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-8561 vulnerable 2026-06-03 14:43:09.647137 Webhook redirect in kube-apiserver
MEDIUM (4.1)
A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver requests to private networks of the apiserver. If that user can view kube-apiserver logs when the log level is set to 10, they can view the redirected responses and headers in the logs.
Published: 2021-09-20T17:05:16.328Z
Updated: 2026-06-01T21:45:29.198Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.