CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 2.7. It affects Kubernetes. Public exploit code or proof-of-concept references have been detected in its references.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
GitHub PoC Links
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2021-25737
Severity
LOW
CVSS
2.7
EPSS
1.33%
Kubernetes
Original NVD Description
A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.
Related CVEs
Other vulnerabilities affecting the same vendor(s)